When a school administrator or board member is asked to account for the safety of their institution, the question is rarely hypothetical. It surfaces after an incident, during a regulatory review, or in a conversation with a parent who wants to know what the school has done to protect their child.

The answer to that question is built before the conversation happens, through the decisions, documentation, and investments that constitute a school’s duty of care. For SROs and school security staff, understanding the duty of care framework matters for a practical reason: it shapes what resources will be approved, what documentation you need to maintain, and what standard your programme will be held to if something goes wrong.

1. What Duty of Care Requires

Duty of care in the school safety context is not a single checklist. It is an ongoing obligation to identify risks, take reasonable steps to mitigate them, document those steps, and review and improve over time.

In practice, this means:

• Risk assessments that are documented, dated, and updated when the facility or threat environment changes. An undocumented risk assessment provides no evidence of due diligence.
• Emergency operations plans that are approved by leadership, communicated to relevant staff, and reviewed at least annually. A plan that exists but has never been shared with the people responsible for implementing it is not a functioning plan.
• Training records that demonstrate staff have been prepared for their roles. Frequency, content, and attendance should all be documented.
• Procurement records that show why equipment was selected. The basis for a procurement decision, standards compliance, third-party verification, fitness for purpose, matters if that decision is ever scrutinised.
• Drill records that show plans have been tested and gaps have been identified and addressed.

CISA’s K-12 School Security Guide for School Resource Officers provides federal guidance on documentation standards and security planning frameworks for schools.

2. Security Planning: Connecting Risk to Response

Security planning is the process that connects what a risk assessment reveals to what people will do during an incident.

The core elements are lockdown protocols, evacuation protocols, communication frameworks, and coordination agreements with local law enforcement and emergency services. Each of these should be specific to the facility, not adapted from a generic template, and should be developed in collaboration with the SROs and security staff who will execute them.

Plans developed without input from the people responsible for implementation tend to fail in practice. The lockdown route that looks logical on a floor plan may be physically blocked in the building. The communication protocol that assumes radio coverage, may not work in the basement corridor. SROs and security staff catch these gaps before they become incident failures.

For a detailed breakdown of response planning elements, read our guide to active shooter preparedness in schools.

3. Protective Equipment in the Governance Framework

When a school procures protective equipment, that decision becomes part of the institution’s safety record. It will be reviewed by administrators, boards, regulators, and potentially legal counsel, against the standard of whether it represented a reasonable and defensible response to the identified risks.

Several factors contribute to a defensible procurement decision:

Standards compliance. Equipment that meets recognised ballistic standards, NIJ Level III+ rating for example, demonstrates that it has been independently evaluated against defined threat levels.

Third-party verification. Equipment verified by independent, qualified laboratories provides a higher level of assurance than manufacturer testing alone. GC Patrol Shield is verified by an independent, ISO-qualified laboratory also qualified by NIJ, and subsequently by the Safety Equipment Institute (SEI).

Real-world testing. GC Patrol Shield is ASTM E3347-25 verified, the most demanding ballistic shield standard currently available, which tests complete shields under conditions including extreme temperature conditioning, water immersion, edge shots, multi-shot impacts, and structural weak points. This goes significantly beyond the NIJ baseline.

Fitness for purpose. A shield selected for a school environment should meet the operational requirements of SROs and school security staff: weight, size, deployment speed, and daily carry considerations. At 20 lb, GC Patrol Shield is half the weight of conventional rifle-rated shields. GC Compact Shield at 10 lb.

Warranty. GC Patrol Shield carries a 10-year warranty, double the industry standard. Warranty length reflects manufacturer confidence in the product’s long-term performance, a relevant consideration when evaluating total cost of ownership.
For guidance on staging and integrating protective equipment, read our guide to ballistic shield placement in schools.

4. Training and Culture: The Gap Between Policy and Practice

Documentation demonstrates intent. Training and culture determine whether intent translates into action.
A safety culture in a school is built through the consistency of how safety is communicated, how drills are conducted, how staff are supported after difficult exercises, and how leadership models the seriousness of preparedness. It is not built through a policy document.
For SROs and security staff, building that culture means being visible, accessible, and credible to the staff and students around them. It means conducting drills that are realistic enough to be useful without being traumatising. It means debriefing after exercises and making genuine improvements, not filing a report and moving on.

5. Communicating With Stakeholders

Parents, staff, and communities have legitimate interests in understanding what a school has done to protect its occupants. Transparency builds trust. Vague reassurances do not.

The most effective communication is specific: what risks were assessed, what plans are in place, what training has occurred, what equipment has been procured and why. Schools that can answer these questions are in a stronger position, with parents, with boards, and with regulators, than those that cannot.

6. Continuous Review

School safety programmes reviewed once and then shelved become obsolete. Threat environments change. Facilities are renovated. Staff turn over. Response plans that were appropriate two years ago may not account for the current configuration of the building or the current composition of the security team.

Annual reviews at minimum, and triggered reviews after any significant incident, facility change, or staffing change, are the standard a duty of care obligation implies.

7. What Security Planning Does and Doesn’t Do

Security planning does:

• Reduce uncertainty during emergencies by establishing pre-agreed protocols
• Improve coordination among staff, security, and first responders
• Demonstrate compliance with duty of care obligations through documented evidence
• Provide layered protective options when equipment, training, and plans are aligned
• Give SROs and security staff a defensible basis for the decisions they make during incidents

Security planning doesn’t:

• Eliminate all risks or prevent every incident
• Replace situational awareness and human judgment during a live event
• Guarantee outcomes in scenarios that deviate from the documented plan
• Substitute for the presence and capability of trained, equipped personnel

Realistic planning recognises both capabilities and limitations, and builds programmes that perform within them.

GC works with schools to support procurement decisions that are standards-compliant, verifiable, and defensible. Speak to the GC team about how GC Patrol Shield fits your school’s safety programme.