What is the first action in a perimeter breach?

• A. Evacuate all personnel
• B. Initiate lockdown, alert command, secure critical access points, and coordinate with responders
• C. Contact the media
• D. Keep perimeter open

Answer: (B)

When a perimeter breach occurs, the priority is to contain and control the situation from the outset. Initiating lockdown, alerting command, securing critical access points, and coordinating with responders does exactly that. Lockdown quickly limits movement and access, reducing opportunities for the intruder to navigate the facility and protecting people and assets. Alerting command ensures a clear chain of authority and rapid decision-making so everyone knows the plan and who to report to. Securing critical access points stops intruders from exploiting weak spots and preserves the scene for responders and investigators. Coordinating with responders brings together the right teams—security, law enforcement, medical—so actions can be taken in a synchronized, efficient way rather than as separate, conflicting efforts. This creates a controlled environment to assess the threat and determine the next steps, whether containment, evacuation, or escalation.

Evacuating all personnel can be necessary, but it isn’t the first move because it may spread people into danger or disrupt control of access points. Contacting the media is inappropriate in a security incident, as it could reveal sensitive information and hamper the response. Keeping the perimeter open would defeat the purpose of containment and allow the threat to move freely.