Case Study · Terrorism Preparedness · 2012
December 14, 2012. Sandy Hook Elementary School's front door was locked. A new buzz-in security system had just been installed. The attacker shot through the glass panel adjacent to the locked door and entered. Inside: some classroom doors required teachers to step into the hallway to lock them. Some substitute teachers had no classroom keys. The locked classrooms protected the people inside. The unlocked ones saw the most deaths. Physical security works — when the whole system is designed, not just the most obvious access point.
Newtown, Connecticut · December 14, 2012
Principal Dawn Hochsprung of Sandy Hook Elementary School had been thinking about security. Earlier in 2012, she ordered a new security system installed that required visitors to be identified by camera before being buzzed into the building. The school locked its doors at 9:30 AM each day. The system was functioning correctly the morning of December 14, 2012 — the front door was locked when the attacker arrived. The CNN account of the attack documents what happened next: the attacker "used 'an assault weapon' to 'literally (shoot) an entrance into the building,'" as Connecticut Governor Dannel Malloy described it. The door was locked. The glass panel in the adjacent window was not reinforced. He shot through the glass, reached through, and entered.
This specific entry point — the glass adjacent to a locked door rather than the door itself — became one of the most discussed physical security lessons of the Sandy Hook attack. The School Security analysis of the event documents the pattern that followed: "Many schools rushed to fortify their front entrance doors, failing to recognize that the Sandy Hook shooter shot out the glass next to the doorway, not in the actual doorway." The lesson was not that buzz-in systems are useless — the system was a genuine security improvement. The lesson was that a hardened door with a full-height glass panel next to it has not addressed the entry vulnerability; it has displaced it.
Inside the school, the physical security landscape was uneven in ways that mattered enormously. The Sandy Hook Advisory Commission's report — the authoritative post-event analysis — found that locked classrooms protected the people inside them. The commission stated: "Classrooms and other safe-haven areas should have doors that can be locked from the inside. The commission cannot emphasize enough the importance of this recommendation." But not all Sandy Hook classrooms met this standard. The Verkada security analysis of the Sandy Hook Advisory Commission report notes: "one substitute teacher was 'unable to lock her classroom door because the school did not provide substitute teachers with classroom keys.'" The doors that required teachers to step into the hallway to lock were a design vulnerability that training couldn't fix — a teacher who had to step into a hallway where an attacker was present was exposed, not protected, by her own locking procedure.
Dec 14, 2012
Date
26 killed
20 Children, 6 Staff
Door locked
Glass Panel Was Not
Locked rooms
Survived
Sub had no key
Critical Failure Point
The Preparedness Framework
Think of physical security as a chain, not a door. A locked front door is one link. The glass panel next to it is another link. The interior hallway that connects the entry vestibule to the main building is another. The classroom doors and their locking mechanisms are more links. A chain is only as strong as its weakest link — and in security, an attacker follows the path of least resistance. Sandy Hook's buzz-in system was a genuine improvement in security. It would have deterred or delayed a less-determined or less-capable attacker. The specific entry method used at Sandy Hook — shooting through glass — bypassed the locked door entirely. The solution is not to conclude that buzz-in systems don't work; it's to evaluate the complete perimeter for vulnerabilities, including glazing adjacent to entry doors. Security vestibules with layered glazing standards — glass that is at minimum impact-resistant — are the design response to the Sandy Hook entry vulnerability.
The Campus Safety Magazine analysis of the Sandy Hook final report documents the evidence directly: "the killer had a considerable amount of time to carry out his attack and appears only to have been impeded by locked doors, potential victims hiding, potential victims fleeing the two unlocked classrooms where most of the violence occurred and other staff and students in distant parts of the school fleeing the building." The two unlocked classrooms — the ones where the locking mechanism required going into the hallway or where no key was available — are specifically identified as where most of the deaths occurred. The Verkada analysis adds: "delays lasting from 30 seconds up to a minute and a half or more" were associated with keyed deadbolt locks because "the teacher has to be the one to lock the door." Thirty seconds of delay in a 10-minute attack is meaningful. Interior-locking doors — lockable from inside without tools, without entering the hallway, by any adult including substitutes — are the Sandy Hook Advisory Commission's single most-emphasized physical security recommendation.
The Navigate360 analysis of Sandy Hook's lockdown experience raises a critical protocol point: "the failure was 'experts' telling them lockdown alone was enough. They totally depended upon teachers entering a hallway to lock classrooms doors. No training on impromptu target hardening and no direction to Run if they could not secure their location." The lockdown protocol at Sandy Hook was implemented exactly as trained: lock the door, hide, stay quiet. Where it failed was in the assumption that all teachers could lock their doors from inside, and that lockdown was the only option when the door couldn't be locked. The full Run-Hide-Fight / Avoid-Deny-Defend protocol explicitly preserves the option to run when an escape route exists. Some students and staff at Sandy Hook who ran or evacuated before the attacker reached their part of the building survived. No protocol is universally correct for all scenarios; training needs to preserve multiple options and the judgment to choose among them.
Timeline
01
Earlier in 2012: Principal Hochsprung orders new security system. Visitors must be visually identified via camera and buzzed in. Doors locked daily at 9:30 AM. Prior lockdown drills had been held at Sandy Hook — "which surely helped many staff quickly [respond] during the shooting," according to the School Security analysis. The school had a custodian who heroically ran through the building alerting staff. The office staff were the first to see the attacker when he arrived.
02
December 14, 9:35 AM: The attacker arrives. The front door is locked. He shoots through the glass panel adjacent to the locked door — bypassing the security system entirely. Principal Hochsprung and school psychologist Mary Sherlach go into the hallway to investigate the sounds; both are killed. Vice principal Natalie Hammond is wounded. Connecticut Governor: attacker used "an assault weapon to 'literally shoot an entrance into the building.'" Entry takes seconds. The glass-next-to-the-door vulnerability that security analysts had noted as a flaw in many buzz-in systems is exploited directly.
03
Inside: locked classrooms protect their occupants. The two unlocked classrooms — where locking required entering the hallway or where substitutes had no keys — see the most casualties. Classrooms with attached bathrooms provide additional shelter for children; multiple accounts describe teachers moving children into bathrooms during lockdown. Students and staff who had been in parts of the building that allowed evacuation when the sounds were first heard and who ran from the building survive. Twenty children and six staff killed total. Connecticut State Police radio did not work inside the building during the response — a communications infrastructure failure identified in post-event analysis.
04
Sandy Hook Advisory Commission report: all classrooms must have interior-locking doors (lockable from inside without entering hallway). Nationwide: "tremendous increase in the number of buzzer systems" post-Sandy Hook, but security experts warn against addressing the door without addressing the glass. STOP School Violence Act (2018): federal funding for school security improvements. CPTED (Crime Prevention Through Environmental Design) principles widely adopted. Federal $25M annual investment in school safety programs. Sandy Hook specifically drives: hardened glass standards for school entry vestibules, interior-locking door hardware programs, substitute teacher key protocols.
Human Decisions
The security system as designed
The School Security analysis of Sandy Hook is careful to distinguish between the security system's design and its specific vulnerability: "there is nothing wrong with having a fortified 2-door-buzz-in entrance system, just like they had at Sandy Hook. Sandy Hook failed to realize the weakness in having a full height glass window next to it." The buzz-in system as installed was a legitimate security improvement. It would have stopped an unauthorized visitor who walked up to the door and tried to open it. It was not designed — and could not have been — to stop a determined attacker who identified and exploited the glass adjacency. The security lesson: when you install a hardened entry point, evaluate every component of the perimeter within reach of that entry point. A door is not a perimeter.
The Sandy Hook attack also documents the heroism of individuals working within and around the constraints of their facility's physical security. The custodian who ran through the building alerting staff. The teacher who used a connected bathroom as a hiding place for her students. The office staff who first saw the attacker and could have radioed a warning. The teachers who blocked their doors with their bodies and furniture. The School Security analysis notes: "at Sandy Hook, the custodian heroically ran through the building alerting staff and helping them by locking doors." This improvised human warning system — a custodian running through hallways — bought critical seconds. Training, drills, and physical security work together; heroic individuals compensate for gaps in each.
What CPTED teaches
The BDC Network's post-Sandy Hook analysis of school design documents the CPTED principles that now guide school security: access control (single, clearly identifiable entry point where visitors are funneled, surveilled, and badged); natural surveillance (cameras and sight lines that make activity visible before it enters the building); territoriality (physical design that communicates defined public and private areas); and target hardening (making the physical structure resistant to intrusion). The most important single element, security experts agree, is the entry system — but the entry system includes everything within reach of that entry point: the glazing, the vestibule design, and the interior doors that a person who has entered can then reach.
The Campus Safety Magazine analysis of the Sandy Hook final report confirms that lockdown worked where it could be implemented effectively: "what saves lives in one situation can result in death in another slightly different situation." The rooms with locked doors saw the least casualties. The rooms where locking was impossible or delayed saw the most. The Navigate360 analysis notes that lockdown shouldn't be the only option: when an escape route is available before an attacker enters your part of a building, running is documented to be protective. Run-Hide-Fight / Avoid-Deny-Defend preserves all three options; the choice between them depends on where the threat is relative to your position at the moment of decision.
The cascade lesson
Sandy Hook is the case study for whole-system physical security design. The buzz-in system was a real security improvement. The glass panel adjacent to the locked door was a real vulnerability that wasn't addressed when the system was installed. Many schools responded to Sandy Hook by installing exactly the same system — without addressing the adjacent glass. The Sandy Hook Advisory Commission's most-emphasized recommendation is interior-locking classroom doors: not keyed deadbolts requiring hallway access, but true interior locks operable from inside without exposing anyone to a hallway. This is the specific, bounded, achievable physical security improvement that the evidence says would have changed outcomes inside Sandy Hook Elementary School on December 14, 2012.
What You Can Do Now
Sandy Hook's lesson is not "security upgrades don't work." It's "security upgrades must account for the whole system — not just the most visible component." These five actions apply to schools, workplaces, and community spaces.
The Sandy Hook entry method was bypassing a locked door by breaking adjacent glass. This specific vulnerability — full-height glass panels adjacent to entry doors — is extremely common in commercial and school buildings. When assessing the physical security of a building you work in, attend, or are responsible for: look at what is within reach of the entry door. If the glass panel adjacent to a locked entry door could be broken and a person could reach the handle or latch through the resulting opening, the locked door is not providing the security it appears to provide. Security vestibules with laminated, impact-resistant, or filmed glass are the design solution.
Building security assessment guideThe Sandy Hook Advisory Commission stated this is the single most important recommendation they made. If you are a teacher, parent, school board member, or workplace safety officer, the specific hardware to advocate for is: classroom or office doors that can be locked from inside the room without requiring the occupant to open the door and step into the hallway. This includes ensuring that substitute teachers, visiting staff, and all building occupants have access to the locking mechanism for their space — not just permanent keyholders.
Interior door locking hardware guideWhen door hardware is not ideal, improvised barricading is the response. CISA and FEMA guidance documents specific techniques: sliding a belt through a door closer and anchoring it; wedging a door stop under the door; moving heavy furniture against the door; pushing a desk or table lengthwise into the hinge side of the door. These techniques are not as reliable as proper locking hardware, but they buy time. Thirty seconds of delay in a 10-minute attack is meaningful. Practice these techniques — knowing how to do them quickly when frightened is different from understanding them conceptually when calm.
Improvised barricading techniques guideLockdown is the "hide" component of Run-Hide-Fight. It's the right choice when: you cannot safely run, the door can be locked, and you can stay out of the attacker's line of sight. Running is the right choice when: you have a clear, safe escape route and the attacker is not between you and the exit. Fighting is a last resort when neither is possible. CISA publishes a free "Active Shooter — How to Respond" guide. The FBI publishes Run-Hide-Fight training videos. ALERRT (Advanced Law Enforcement Rapid Response Training) offers civilian training. Training before an event — knowing these options and practicing the decision-making — is more protective than reading about them after.
Run-Hide-Fight training resourcesThe number-one cause of preventable death in a mass shooting event is hemorrhage (uncontrolled bleeding) from penetrating wounds. Emergency medical care may not arrive for 5–15 minutes after an active shooter event. "Stop the Bleed" — a DHS-supported training program — teaches three skills: applying direct pressure, packing a wound, and applying a tourniquet. These skills are documented to save lives in mass casualty events. A free 2-hour Stop the Bleed course is available through the American College of Surgeons nationwide. Bleeding control kits (tourniquets, wound packing gauze) are now available in many public buildings. Knowing how to use them before you need them is the individual preparedness action with the highest potential to save a life in the minutes after a shooting, before professional medical care arrives.
Stop the Bleed training guideTerrorism preparedness case study series
Columbine 1999 covers the doctrine shift that changed law enforcement response. Virginia Tech 2007 covers warning signs not connected and emergency notification failure. Las Vegas 2017 covers outdoor event preparedness. Parkland 2018 covers warning signs that were reported and not acted on.
Full terrorism preparedness case study seriesSources