Two schools receive an almost identical vulnerability assessment report. School A files it away. School B prioritizes five urgent items, assigns responsibilities, gets funding, fixes doors/windows, improves lighting, adjusts visitor protocols, trains staff, conducts follow-up inspections—and a year later, a serious incident at a nearby school validates many of their earlier findings.
School B didn’t prevent everything (no, you can’t prevent everything), but their action made a real difference.
The Gap: Assessments Without Follow-Through
It is not uncommon for schools to produce excellent vulnerability assessments and then let them gather dust. Reasons include lack of funding, under-appreciation of severity, diffuse responsibility, or “assessment fatigue.” To avoid that, you need systems for accountability and long-term planning.
Proven Strategies for Moving from Findings to Tangible Improvements
Risk Prioritization & Action Plan
Description:
Divide findings into categories—Critical, High, Medium, Low.
Create a roadmap: which vulnerabilities get addressed in 30 days, 90 days, within the school year, longer-term.
Keys to Success:
Use clear criteria (threat probability, potential impact, cost, feasibility). Involve budget, maintenance, leadership.
Budgeting & Resource Allocation
Description:
Build into your annual budget funding for mitigation. Seek grants (state, federal), partner with community or law enforcement, use district safety funds.
Keys to Success:
Early planning; make a compelling case using data; show cost of non-action (liability, risk). Consider “quick wins” to build momentum.
Policy & Procedure Updates
Description:
Update visitor access, emergency response plans, communication protocols, staff training requirements. Revisit policies after assessment.
Keys to Success:
Ensure policies are realistic, known by staff, practiced. Roll out training and refreshers.
Technology & Physical Infrastructure
Description:
Fix or enhance: door hardware, locks, surveillance, lighting, signage, fencing, windows. Upgrade aging infrastructure. Ensure redundant communication (PA, radios, mass notification).
Keys to Success:
Don’t rely solely on techno-fixes; integrate with human behavior. Maintain what you install.
Continuous Monitoring & Re-Assessment
Description:
After implementing changes, monitor whether vulnerabilities recur. Schedule re-walkthroughs or inspections. Use incident feedback (near misses, “close calls”) to adjust.
Keys to Success:
Create a feedback loop. Use metrics / KPIs (e.g. number of reported vulnerabilities fixed, time to repair, threats avoided).
What Administrators Should Do in the Next 30 / 90 / 365 Days
Next 30 Days:
Review your latest vulnerability assessment; highlight “critical/high” items that have not yet been addressed.
Assign a responsible person for each item (could be facility manager, safety coordinator, maintenance, resource officer).
Begin gathering costs for repairs / upgrades and identifying potential funding sources.
Next 90 Days:
Implement quick wins (door repairs, lighting fixes, locks, signage, visitor controls).
Update/practice policies and procedures that are low cost but high impact.
Conduct a drill or tabletop exercise that test some of the vulnerabilities you fixed or tried to fix; observe whether issues persist.
Next School Year (365 Days):
Full review of policies and physical infrastructure. Budget accordingly.
Institutionalize the reporting system; ensure vulnerabilities and remediation progress are part of regular safety meetings.
Reassess to see what new vulnerabilities have arisen—for example, due to construction, enrollment change, or external threats.
Want help developing a downloadable checklist for your school’s vulnerability assessment?
Send me a message for help.
