Shepherd's Shield Safety Foundation
Certified Unarmed Church Security Officer
CUCSO CURRICULUM — VERSION 1.0
A complete 8-hour instructor-led curriculum including lesson plans, instructor notes, student activities, discussion questions, scenario exercises, and written assessment. For use by SSSF Certified Church Security Instructors (CCSI) only.
Instructor Name: _________________________________ |
CCSI #: ____________
Delivery Date: _________________ |
Location: _________________________________
Class Size: ________ |
Sponsoring Organization: _________________________________
"Protecting the Flock. Preserving Life. Glorifying God."
CONFIDENTIAL — For Authorized CCSI Instructors Only
📖 How to Use This Curriculum
This document is the complete instructor guide for delivering the SSSF Certified Unarmed Church Security Officer course. Each module includes the lesson plan, instructor talking points, student-facing content, activities, and review questions.
- Yellow boxes = Instructor notes and delivery guidance (not read aloud to students)
- Blue boxes = Student-facing content (read aloud or display on screen)
- Green boxes = Activities, role-plays, and exercises
- Purple boxes = Module review questions (use as oral review or written quiz)
Delivery options: Full day (8 hours with breaks) or split across two 4-hour sessions. Online delivery is permitted for Modules 1, 2, 4, 6, and 7 only. Modules 3 (role-play) and 8 (scenarios) must be conducted in person.
📅 Schedule at a Glance
| Time | Module | Topic | Hours |
| 8:00 AM | Module 1 | Foundation, Philosophy & Role | 1.0 |
| 9:00 AM | Module 2 | Threat Recognition & Situational Awareness | 1.0 |
| 10:00 AM | Break (15 min) | — |
| 10:15 AM | Module 3 | De-Escalation Techniques & Conflict Resolution | 1.5 |
| 11:45 AM | Lunch (45 min) | — |
| 12:30 PM | Module 4 | Access Control & Crowd Management | 0.75 |
| 1:15 PM | Module 5 | Emergency Response Procedures | 1.0 |
| 2:15 PM | Break (10 min) | — |
| 2:25 PM | Module 6 | Team Operations & Communication | 0.75 |
| 3:10 PM | Module 7 | Documentation, Reporting & Legal Obligations | 0.75 |
| 3:55 PM | Module 8 | Scenarios & Written Assessment | 1.25 |
| 5:00 PM | Certification Awards & Dismissal | — |
📚 Module 1 — Foundation, Philosophy & Role of the Church Security Officer
Module 1 — Foundation, Philosophy & Role
1.0 Hour Materials: Whiteboard/flip chart, SSSF handout #1
Upon completion, the student will be able to:
- Define the role, authority, and legal boundaries of a church security officer vs. a law enforcement officer
- Articulate the de-escalation first principle as the governing standard for all church security response
- Describe the protector mindset and distinguish a peacekeeper from an aggressor
- Identify the five SSSF governing principles and explain each in their own words
- Explain at a general level the concept of personal and organizational liability
📋 Instructor Note: This is the first impression students have of the course and of SSSF. Set the tone immediately — this is not a tactical shooter course. Open with energy, faith-centered language, and genuine passion for the mission. Know your students: ask for a show of hands of those currently serving on a church security team, those who have law enforcement or military backgrounds, and those who are completely new to security. Adjust your pacing accordingly. Have SSSF handout #1 distributed before class begins.
Materials needed: Whiteboard or flip chart, SSSF Handout #1 (Five Governing Principles), name tents or name tags for students, class roster sign-in sheet.
📣 Say to Students: "Welcome to the Shepherd's Shield Safety Foundation Certified Unarmed Church Security Officer course. My name is [name] and I am a SSSF Certified Church Security Instructor. Before we get into the material, I want you to understand something about who we are and why this course is different. We are not here to train warriors. We are here to train peacekeepers. Everything you learn today is built on one foundational truth: the goal is always to protect life — all life — and to do that, de-escalation is always our first tool."
Instructor Action:
- Conduct brief introductions — name, church or organization, why they are here
- Cover logistics: bathrooms, breaks, phones on silent, participation expected
- Distribute and review the daily schedule
📣 Key Teaching Points:
- A church security officer is a private individual — not a law enforcement officer. You do not have arrest powers beyond those of any private citizen. You are not "the police." You are a trained member of the congregation whose role is to observe, deter, de-escalate, and when necessary, respond.
- Your authority comes from the church or organization that has designated you for this role — not from the government.
- Law enforcement officers have qualified immunity and extensive legal protection. You do not. Every action you take as a church security officer carries personal legal risk.
- Your job is to support law enforcement, not replace it. When law enforcement arrives, your job is largely done.
📋 Instructor Note: Draw a clear side-by-side comparison on the whiteboard: Law Enforcement Officer vs. Church Security Officer (authority, powers, training, liability, equipment, jurisdiction). Students often come in with a "cop" mentality. This comparison immediately reframes their mindset. Ask: "Has anyone ever seen a church security officer overstep their role? What happened?"
📣 The Five Governing Principles — Read and discuss each:
- De-Escalation First: Always the preferred and primary response. Physical force is a last resort — only when de-escalation has been exhausted or is clearly not viable.
- Preservation of Life Above All: Protect all human life, including the life of the aggressor. We are peacekeepers, not warriors.
- Sound Judgment Under Pressure: Clear thinking and emotional self-regulation under stress are as important as any physical skill.
- Compassion & Community Integration: The people we may confront are often members of our own community. Mental health awareness and compassionate response are essential.
- Legal Accountability: Every action carries legal consequences. Know the boundaries of lawful action before you ever need to act.
📋 Instructor Note: Do not just read these — discuss them. After each principle, ask students: "What does this look like in practice at your church?" The goal is to make these principles feel real and personal, not abstract. Principle 2 often generates the most discussion. Someone will inevitably ask "even a shooter?" — address this directly: yes, even then your goal is to stop the threat, not to kill. The law reflects this.
✏️ Activity 1A — Principles in Practice (5 min)
Ask students to turn to a partner and answer:
"Which of the five principles do you think will be hardest to apply in a real situation at your church, and why?" Take 2–3 responses from the class. This exercise reveals assumptions and sets up later modules.
📣 Key Teaching Points on Liability:
- Personal liability: If you use force improperly, you can be sued personally — and potentially charged criminally. "I was trying to help" is not a legal defense.
- Organizational liability: Your church can also be sued if you acted in your security role and caused harm. This is why training and documentation matter.
- The protection of training: Documented, standardized training is one of the strongest legal defenses available. It demonstrates you acted within accepted practice.
- When in doubt, don't: If you are not certain an action is appropriate, do not take it. Call 911. Step back. De-escalate. The cost of hesitation is far lower than the cost of a wrongful action.
📋 Instructor Note: This is not a law class — do not try to teach specific statutes. The goal is awareness, not expertise. Emphasize that students should consult their church leadership and if possible an attorney about their specific situation. Recommend the church carry liability insurance that covers security team members acting in their designated role.
❓ Module 1 Review — Oral or Written
- What is the primary difference in legal authority between a church security officer and a sworn law enforcement officer?
Answer: A church security officer has no government-granted authority or arrest powers beyond those of any private citizen. A sworn officer has state-delegated law enforcement authority, qualified immunity, and broader legal powers.
- State the de-escalation first principle in your own words.
Answer: De-escalation is always the first and preferred response. Physical force is a last resort used only when de-escalation has failed or is clearly not possible.
- Name the five SSSF governing principles.
Answer: (1) De-Escalation First, (2) Preservation of Life Above All, (3) Sound Judgment Under Pressure, (4) Compassion & Community Integration, (5) Legal Accountability.
- Why does proper documentation and training matter from a legal liability standpoint?
Answer: Documented training demonstrates that the officer acted within accepted professional practice, which is a key legal defense in both civil and criminal proceedings.
- A church security officer observes someone acting suspiciously in the parking lot. What is their first responsibility?
Answer: Observe and report — notify team leadership or call 911 if appropriate. A church security officer's role is to observe, deter, de-escalate, and support law enforcement, not to confront independently without backup.
👁️ Module 2 — Threat Recognition & Situational Awareness
Module 2 — Threat Recognition & Situational Awareness
1.0 Hour Materials: Scenario photos (optional), SSSF handout #2
- Define behavioral baseline and explain how deviations signal potential concern
- Identify at least five pre-attack behavioral indicators
- Distinguish between a person who poses a threat and a person experiencing a mental health crisis
- Apply the OODA Loop as a real-time decision-making tool
- Describe specific considerations for protecting children, elderly, and persons with disabilities
📋 Instructor Note: This module builds critical observational skills. If possible, use photographs or video clips (from publicly available security training resources) showing crowded worship environments to practice baseline identification. The mental health distinction is critical — students need to leave this module understanding that most disruptive behavior in a church is NOT a criminal threat. Overreaction to a person in mental health crisis is a common and costly mistake.
📣 Key Teaching Points:
- Baseline behavior is what normal looks like in your specific environment. A worship service has a predictable pattern — people arrive, they socialize, they worship, they depart. Most behavior fits this pattern.
- Anomalies stand out when you know the baseline. Someone who is overdressed for the weather, who enters without making eye contact with anyone, who sits near exits, who repeatedly checks their phone or watches the stage area without worshipping — these are not automatic threats, but they are worth noting.
- Pre-attack indicators (Gavin de Becker's work, expanded):
- Unusual clothing (concealment of body or items)
- Target glancing (repeatedly looking at a specific person or area)
- Grooming behavior (touching face, hair, clothing nervously)
- Tunnel vision (not responding to normal social cues)
- Hands: where are they? Hidden hands are a concern
- Rigid, deliberate movement inconsistent with the environment
- Emotional agitation not explained by the service context
📋 Instructor Note: Emphasize: observing these indicators does NOT mean you act — it means you watch more closely, position yourself strategically, and alert your team. The OODA Loop (next segment) governs what comes after observation.
✏️ Activity 2A — Baseline Exercise (5 min)
Ask students:
"Think about your most recent Sunday service. Close your eyes and picture the congregation. What does 'normal' look like? Now — has anyone ever stood out to you and you weren't sure why? What were they doing?" Take 3–4 responses. This exercise activates existing pattern recognition and validates students' instincts.
📣 The OODA Loop — Observe, Orient, Decide, Act:
- Observe: Take in raw data — what you see, hear, smell. No interpretation yet. Just facts.
- Orient: Filter the data through your training, experience, and context. "Is this normal? Does this fit the baseline? What do I know about this person or situation?"
- Decide: Choose a course of action. Monitor? Move closer? Alert team? Call 911? De-escalate?
- Act: Execute the decision. Then immediately start the loop again — Observe what changed as a result of your action.
The goal of training is to accelerate your OODA Loop — experienced officers cycle through it in seconds. Untrained individuals get stuck in Orient (second-guessing themselves) or skip to Act without enough information.
📣 Threat vs. Crisis:
| Person in Crisis | Person Posing a Threat |
| Confused, disoriented, frightened | Deliberate, purposeful, controlled |
| Responding to internal stimuli (voices, delusions) | Externally focused on a specific target |
| May be loud, erratic, unpredictable in movement | Often calm, quiet, concealed |
| Needs compassionate engagement, possibly medical | Needs containment, law enforcement notification |
| Response: calm voice, space, call 911 for welfare | Response: alert team, evacuate area, call 911 |
📋 Instructor Note: This distinction saves lives and prevents lawsuits. A security officer who responds with force to a person in mental health crisis — when that person posed no actual threat — can face assault charges, civil suit, and will certainly harm the church's reputation. Emphasize: when in doubt, slow down and observe more before acting. The worst outcomes come from acting too fast on incomplete information.
❓ Module 2 Review
- What is behavioral baseline and why does it matter for a church security officer?
Answer: Baseline is the normal pattern of behavior in a specific environment. Knowing the baseline allows an officer to quickly notice anomalies that may indicate concern.
- List four pre-attack behavioral indicators.
Answer: Any four of: unusual/concealing clothing, target glancing, grooming behavior, tunnel vision, hidden hands, rigid movement, emotional agitation inconsistent with context.
- What does OODA stand for and what is its purpose?
Answer: Observe, Orient, Decide, Act. It is a decision-making loop that helps security officers process information and respond appropriately under pressure.
- Name two behavioral differences between a person in mental health crisis and a person posing an intentional threat.
Answer: A person in crisis is typically confused/disoriented and responding to internal stimuli; a threat actor is deliberate, externally focused on a target, and often calm and concealed.
- A person enters your church service agitated, talking loudly to themselves, and pacing. What is your first action?
Answer: Observe and assess — determine if this is mental health crisis or intentional threat behavior. Alert team lead. Approach calmly if safe to do so. Call 911 for welfare check if person appears in distress. Do not use force unless imminent physical threat is present.
🗣️ Module 3 — De-Escalation Techniques & Conflict Resolution
Module 3 — De-Escalation Techniques & Conflict Resolution
1.5 Hours Materials: Role-play scenario cards, SSSF handout #3 | IN-PERSON REQUIRED
- Demonstrate effective verbal and non-verbal de-escalation in at least two role-play scenarios
- Identify the four stages of conflict escalation and name the best intervention point
- Apply active listening, empathetic language, and tone management in a tense situation
- Determine when de-escalation is no longer viable and articulate the reason clearly
📋 Instructor Note: This is the most important module in the course — spend the full time. The role-plays are non-negotiable. Students learn de-escalation by doing it, not by hearing about it. Pair students strategically: put confident talkers with quieter students. Run at least two full role-plays with debrief. If time allows, run a third. Print and cut the role-play scenario cards before class.
📣 The Four Stages of Conflict:
- Trigger Stage: Something happens that upsets the individual — perceived slight, frustration, fear, or a pre-existing grievance. Behavior: tense body language, short responses, avoidance or staring. Best intervention point — easiest to de-escalate.
- Escalation Stage: Emotions rise. Voice gets louder, posture becomes aggressive, personal space is invaded. Rational thinking begins to decrease. De-escalation still effective but requires more skill.
- Crisis Stage: The person has lost rational control. May be yelling, crying, physically aggressive. Tunnel vision. Not hearing your words clearly. Physical safety is the priority — create distance, call for backup.
- Recovery Stage: After the peak passes, the person begins to calm. Breathing slows, eye contact normalizes, voice softens. Re-engage with compassion — do not lecture or shame.
📋 Instructor Note: Draw the escalation curve on the whiteboard — a hill shape showing trigger → escalation → crisis peak → recovery. Mark where intervention is most effective (early). Ask students: "At which stage do you usually notice a problem at church?" Most will say escalation or crisis — which is too late for easy resolution. The goal is to catch it at trigger.
📣 Verbal De-Escalation — The LEAPS Model:
- L — Listen: Let them speak. Do not interrupt. Nod. Make eye contact. People in crisis need to feel heard before they can calm down.
- E — Empathize: "I can see you're really upset about this. That makes sense." You do not have to agree — you have to acknowledge their emotional state.
- A — Ask: Ask open-ended questions to gather information and keep them talking. "Can you help me understand what happened?" Talking reduces adrenaline.
- P — Paraphrase: Reflect back what they've said. "So what I'm hearing is..." This confirms you listened and slows the emotional escalation.
- S — Summarize & Solve: "Here's what I can do to help..." Offer a face-saving way out. Never back them into a corner.
Tone rules: Slow your speech. Lower your volume (do not match their energy). Keep your voice calm and even. Never sarcastic, never dismissive, never threatening.
📣 Non-Verbal De-Escalation:
- Distance: Give space — minimum 6 feet initially. Crowding someone who is agitated increases danger.
- Posture: Slight angle (not squared up — squaring up reads as a challenge). Hands visible and open, at waist level.
- Eye contact: Steady but not staring. Staring is a dominance signal — it escalates.
- Facial expression: Neutral to concerned. Not smiling (can read as dismissive), not frowning (confrontational).
- Movement: Slow and deliberate. No sudden movements.
📣 When to Stop De-Escalating:
- The person has or displays a weapon
- The person makes a specific credible threat to harm someone
- The person has already struck someone and continues to advance
- Your own safety or the safety of others is in immediate danger
At this point: create distance, call 911 immediately, alert your team, begin evacuation of the area. Your job is no longer to talk — it is to protect.
📋 Instructor Note: Students sometimes over-apply de-escalation — they try to talk to an active attacker. Be explicit: de-escalation is for pre-violent, escalating situations. Once violence is in progress, the response changes entirely (covered in Module 5). The transition point is imminent physical threat.
📋 Instructor Note: Run a minimum of two role-plays. For each: (1) brief the scenario, (2) assign roles, (3) run it (3–5 min), (4) pause and debrief (5 min). Focus debrief on: what worked, what escalated the situation, what they would do differently.
🎭 Role-Play Scenario A — The Disruptive Congregant
Situation: During the Sunday morning service, an older man in the third row begins arguing loudly with his wife. Several congregants turn to look. The argument escalates — he stands up and begins pointing his finger in her face and raising his voice. Other worshippers nearby are visibly uncomfortable.
Role A (student): You are the church security officer. You need to intervene.
Role B (instructor or volunteer): You are the upset husband. You are angry about a personal matter and feel disrespected. You will respond to calm, empathetic engagement but will escalate if you feel talked down to.
Debrief Questions: Did the officer give appropriate space? Were they using the LEAPS model? Did they lower their voice? Did they offer the person a face-saving exit?
🎭 Role-Play Scenario B — The Unwanted Visitor
Situation: A man arrives at the church during Wednesday evening service. He is known to the pastor as a former member who was asked not to return after a conflict with leadership six months ago. He is not acting violently but is insisting loudly at the welcome desk that he has the "right to be here" and that the pastor "stole from him." He has not made any physical threats but is blocking the entrance and refusing to leave.
Role A (student): You are the security officer on duty at the entrance.
Role B: You are the former member — you are angry and feel wronged, but you are not violent. You will leave if given a respectful path to do so.
Debrief Questions: Did the officer acknowledge his grievance without agreeing with it? Did they offer a face-saving exit ("Let's step outside and I'll get the pastor's office to call you tomorrow")? Did they call for backup?
❓ Module 3 Review
- At which stage of conflict escalation is intervention most effective, and why?
Answer: The Trigger Stage — the person has not yet lost rational control, emotional investment is lower, and a calm interaction can resolve the situation before it escalates further.
- What does LEAPS stand for?
Answer: Listen, Empathize, Ask, Paraphrase, Summarize & Solve.
- Why should you not match the energy level of an agitated person?
Answer: Matching their energy (volume, pace, intensity) escalates the confrontation. A calm, measured response lowers the emotional temperature and signals safety.
- Name two non-verbal de-escalation techniques.
Answer: Any two of: maintain appropriate distance, open and visible hands, slight body angle, steady non-staring eye contact, slow deliberate movement, neutral facial expression.
- A person you are attempting to de-escalate suddenly produces a knife. What do you do?
Answer: Immediately create distance, alert your team, call 911, and begin evacuating people from the area. De-escalation is no longer the primary response — the priority is protecting lives and getting law enforcement on scene.
🚪 Module 4 — Access Control & Crowd Management
Module 4 — Access Control & Crowd Management
45 Minutes Materials: Building diagram (if available), SSSF handout #4
- Apply access control procedures that balance security with a welcoming church environment
- Describe procedures for managing uninvited, disruptive, or banned individuals
- Explain crowd management considerations for high-attendance events
- Identify specific security protocols for children's ministry access control
📣 Key Concept — You Are the First Line of Welcome AND Security:
- Your presence at the door communicates two things simultaneously: "You are welcome here" and "This place is protected."
- A hostile or intimidating door presence drives people away. An inattentive one fails its security purpose. The goal is warm but watchful.
- Entry point best practices: Position yourself with a clear sightline to the approach. Make eye contact and greet everyone who enters. Note anyone who actively avoids eye contact or exhibits pre-attack indicators. Know who has already entered — track unusual individuals mentally.
- Prohibited items: Your church leadership must establish this list. Common items: weapons (if your church is not a carry-permitted environment), bags that cannot be inspected, and alcohol. Post the policy visibly — enforcement is easier when the rule is clearly displayed.
📣 Handling an Uninvited or Banned Person:
- Approach calmly and privately — do not create a scene at the entrance in front of the congregation
- Identify yourself: "I'm with the security team here at [church name]."
- State the situation clearly and without accusation: "I've been informed that there is a no-contact order/trespass notice in place. I need to ask you to step outside with me."
- If they comply — escort them outside, thank them for cooperating, call leadership
- If they refuse — call 911 immediately; do not attempt to physically remove them unless there is imminent danger; keep others away from the area
Trespass documentation: All trespass notices must be in writing, served personally or by certified mail, and a copy kept in your church security file. Law enforcement cannot enforce a trespass without a documented notice.
📣 Children's Ministry — Highest Priority Access Control:
- Check-in systems: Every church with a children's program should have a formal check-in system matching children to authorized adults. Numbered tags, digital check-in apps (Planning Center, etc.), or a manual log are all acceptable.
- Authorized pickup only: Children must only be released to adults whose names appear on the authorized pickup list. No exceptions. No matter how insistent the adult is.
- Custody disputes: If a non-custodial parent or unauthorized adult demands a child, do not release the child. Call 911. This is a law enforcement matter — do not attempt to resolve it yourself.
- Children's area security: The children's wing should have a single controlled entry point during service hours. Consider a keypad or door monitor.
- Lockdown for children's areas: Designate a lockdown procedure specifically for the children's wing — staff should be trained separately on this protocol.
📋 Instructor Note: The children's ministry segment almost always generates the most engagement. Many students have either witnessed or personally experienced a custody dispute at a church. Let this conversation breathe — the emotional investment drives retention of the material.
❓ Module 4 Review
- What is the "greeter-guardian balance" and why does it matter?
Answer: A church security officer at the entrance must be welcoming enough to not drive people away while remaining observant and security-focused. An overly aggressive presence harms the church culture; an inattentive one fails the security mission.
- A person who was previously banned from the church arrives for Sunday service. What is your first action?
Answer: Approach calmly and privately, identify yourself as security, state the trespass notice clearly, and ask them to step outside. If they refuse, call 911 — do not physically remove them unless there is imminent danger.
- Why must trespass notices be in writing?
Answer: Law enforcement cannot enforce a trespass without documented written notice. Verbal bans are not legally enforceable for trespass purposes.
- An adult arrives to pick up a child from the nursery but their name is not on the authorized pickup list. What do you do?
Answer: Do not release the child. Contact the child's parent or guardian immediately. If the situation escalates or you cannot reach the parent, call 911.
- Name two specific security measures for a children's ministry area.
Answer: Any two of: formal check-in/check-out system with matching tags, single controlled entry point, authorized pickup list with no exceptions, keypad or door monitor, separate lockdown procedure for children's wing.
🚨 Module 5 — Emergency Response Procedures
Module 5 — Emergency Response Procedures
1.0 Hour Materials: Building floor plan (highly recommended), SSSF handout #5
- Execute the Run-Hide-Fight framework correctly in a worship environment
- Describe security officer roles during lockdown, fire evacuation, and medical emergency
- Demonstrate effective first responder coordination upon law enforcement arrival
- Identify evacuation routes, rally points, and lockdown positions in their specific facility
📣 Run-Hide-Fight — The CISA/DHS Framework Adapted for Worship:
- RUN: If there is an accessible escape route, evacuate immediately. Leave belongings. Help others escape if possible. Do not let others' hesitation stop you. Call 911 once safe. As a security officer: your role is to direct, encourage, and facilitate evacuation of others — especially those who freeze.
- HIDE: If evacuation is not possible, hide. Lock doors, turn off lights, silence phones, get behind solid objects (cover, not just concealment). Stay out of the shooter's view. Do not open the door for anyone until law enforcement gives the all-clear. As a security officer: help others hide effectively; block doors if no lock is available; maintain quiet.
- FIGHT: Only as an absolute last resort, when death or serious injury is imminent and neither run nor hide is possible. Commit fully. Use improvised weapons — fire extinguisher, chair, anything available. As an unarmed security officer: your physical response options are limited. Your primary value in this phase is coordination, communication, and protecting others while law enforcement responds.
📋 Instructor Note: Be honest with unarmed students — their role in an active shooting is primarily Run and Hide, then help others do the same. Their value is in preparation, early detection, and rapid communication — not in confronting an armed attacker unarmed. This is not defeatist — it is realistic and it saves lives.
📣 Lockdown Procedures:
- Lockdown is called when there is an internal threat requiring everyone to shelter in place
- Clear, pre-established code word or announcement system (avoid panic-inducing language over PA)
- Each room locks down independently — designated room security officer closes and locks door, moves people away from windows and doors, accounts for all persons in the room
- All-clear only given by law enforcement or designated leadership — not by another congregant or even another security team member unless protocol specifies
📣 Medical Emergencies:
- Call 911 first — before beginning any response. Give address, nature of emergency, number of patients
- Assign one person to meet and guide EMS to the patient's exact location
- Clear bystanders from around the patient — maintain a perimeter
- Know where your AED is located — time-to-defibrillation is the #1 factor in cardiac arrest survival
- Do not move a patient who may have a spinal injury unless they are in immediate danger
- Document: time of incident, time of 911 call, who responded, what treatment was rendered
📣 When Law Enforcement Arrives:
- Immediately comply with all officer commands — do not argue, do not explain first
- Hands visible — keep them empty and raised or at your sides
- Do not point weapons — if armed, holster before officers arrive if at all possible
- Officers are in a high-stress, unknown environment — they will treat everyone as a potential threat until they establish control
- Once directed to a safe area, provide your name, role, and a brief factual description of what you observed
❓ Module 5 Review
- In the Run-Hide-Fight framework, when is Fight the appropriate response?
Answer: Only as an absolute last resort when death or serious injury is imminent and neither Run nor Hide is possible. It requires full commitment.
- As an unarmed security officer during an active threat, what is your primary role?
Answer: Directing and facilitating the evacuation of others (Run), helping people hide effectively (Hide), maintaining communication with law enforcement, and protecting others through coordination — not physical confrontation.
- Who gives the all-clear signal to end a lockdown?
Answer: Law enforcement, or the designated leadership authority per the church's pre-established protocol — not individual security team members acting on their own assessment.
- What is the single most important action to take when a medical emergency occurs?
Answer: Call 911 immediately — before beginning any response.
- Law enforcement arrives during an active incident and an officer shouts commands at you. What do you do?
Answer: Immediately comply. Keep hands visible and empty. Do not argue or try to explain first. Follow all commands. Provide your identity and role once directed to do so.
📡 Module 6 — Team Operations & Communication
Module 6 — Team Operations & Communication
45 Minutes Materials: Radios (if available for demo), SSSF handout #6
- Demonstrate proper radio communication protocols
- Describe effective team positioning during a worship service
- Conduct a pre-service security briefing
- Communicate with pastoral leadership during an incident without creating panic
📣 Radio Protocols:
- Think before transmitting: Know what you want to say before pressing the button
- Identify yourself and recipient: "[Your name] to [recipient's name]" every transmission
- Be brief and clear: No unnecessary words. Speak at a normal pace — not fast
- Use plain language: Avoid codes unless your team has pre-established and trained on them
- Confirm receipt: End with "copy?" and wait for confirmation
- Emergency override: "BREAK BREAK BREAK" clears the channel for emergency traffic
- Radio discipline: No casual conversation on the security channel during service
Sample transmission: "Johnson to Williams — I have a male, 30s, dark jacket, acting suspicious near the east entrance. Request you move to that position. Copy?"
📡 Activity 6A — Radio Practice (5 min)
Pair students and have them practice the following radio transmissions: (1) Requesting backup at the children's wing entrance. (2) Reporting a medical emergency in the main sanctuary. (3) Issuing a lockdown alert. Debrief: Was the transmission clear? Did they identify themselves? Was it concise?
📣 Team Positioning During Services:
- Cover the angles: Assign positions to cover all entry points, the stage area, and the rear of the sanctuary. No blind spots.
- Rotate positions: Standing in one spot for 2 hours degrades alertness. Rotate positions every 30–45 minutes.
- Blend in: You are more effective when you are not obviously "security." Dress like the congregation.
- Stay off your phone: Your attention must be on the environment, not a screen.
- Never both look the same direction: If you are paired with another officer, face opposite directions to maximize coverage.
📣 Pre-Service Security Briefing (conduct before every service):
- Review any known threats or persons of concern from the previous week
- Confirm assignments and radio channel
- Identify any special circumstances (visiting speakers, large crowds, holiday service)
- Confirm AED location and who is medical lead today
- Confirm chain of command for today — who calls 911, who commands the scene
- Prayer (if appropriate for your team culture)
❓ Module 6 Review
- What phrase clears a radio channel for emergency traffic?
Answer: "BREAK BREAK BREAK"
- How often should team members rotate positions during a service, and why?
Answer: Every 30–45 minutes. Static positioning degrades alertness — movement keeps the observer fresh and changes the visual coverage pattern.
- Name three items that should be covered in a pre-service security briefing.
Answer: Any three of: known threats/persons of concern, position assignments and radio channel, special circumstances, AED location and medical lead, chain of command for calling 911.
- Why should church security officers dress like the congregation?
Answer: Officers in plain clothes are less predictable to a threat actor and blend into the environment, allowing for unobtrusive observation and response.
- Two security officers are stationed near the stage. How should they position themselves relative to each other?
Answer: Facing opposite directions — to maximize combined coverage and eliminate blind spots between them.
📝 Module 7 — Documentation, Reporting & Legal Obligations
Module 7 — Documentation, Reporting & Legal Obligations
45 Minutes Materials: Sample incident report form, SSSF handout #7
- Complete an accurate objective incident report using the 5W+H framework
- Identify what must and must not be included in a written report
- Explain evidence preservation basics and crime scene awareness
- Describe confidentiality requirements for incident information
📣 The 5W+H Framework for Incident Reports:
- Who: Full description of all involved parties — physical description, name if known, relationship to church
- What: Exactly what happened — actions, words (direct quotes where possible), sequence of events
- Where: Specific location within the facility — not "in the church," but "north entrance hallway, approximately 10 feet from the exterior door"
- When: Exact time if known; approximate if not. Note time of first observation, time of intervention, time of 911 call, time of officer arrival
- Why: Only if directly stated by a party — do not speculate on motive
- How: How the incident developed and how it was resolved
Language rules: Write only what you
observed, not what you
concluded. "The man smelled of alcohol" is an observation. "The man was drunk" is a conclusion. Write observations.
📣 What NOT to Write:
- Opinions, theories, or speculation ("I think he was going to attack someone")
- Legal conclusions ("He was trespassing" — that is for law enforcement/courts to determine)
- Information from others unless clearly attributed ("Deacon Williams told me that...")
- Racial or ethnic descriptors unless directly relevant to identifying a specific individual involved in the incident
- Profanity — paraphrase ("used profane language toward staff")
✏️ Activity 7A — Report Writing Exercise (10 min)
Present the following scenario verbally and have students write a brief incident report:
"During Sunday service at 10:45 AM, a woman in her 50s, approximately 5'4", wearing a red coat, entered through the main entrance and began shouting that the pastor had stolen her money. She was crying and pointing toward the stage. Security officer Davis approached, identified himself, and guided her to the foyer. She continued shouting for approximately 3 minutes then sat down and became quiet. She gave her name as Martha Fields. Pastor Moore was notified at 10:52 AM. The woman left voluntarily at 11:05 AM. No physical contact occurred. No law enforcement was called."
Collect and briefly review 2–3 student reports aloud. Highlight: good objective language, appropriate detail level, and any speculative language to correct.
📣 Evidence Preservation Basics:
- Do not disturb a scene where a crime may have occurred — leave it exactly as found for law enforcement
- If you must remove a dangerous item: use gloves if available, minimize handling, note exactly where it was found and photograph it if possible
- Witness information: get names and contact information of all witnesses before they leave. People's memories degrade quickly.
- Video/surveillance: immediately notify church leadership and IT/AV staff to preserve any surveillance footage before it is overwritten
📣 Confidentiality:
- Incident reports are confidential. Share only with church leadership, your security team lead, and law enforcement when required.
- Do not discuss incident details with other congregants, family members, or on social media
- Do not release reports to the media — direct all media inquiries to the church's designated spokesperson
❓ Module 7 Review
- What is the difference between an observation and a conclusion in a report?
Answer: An observation is a factual statement of what you directly perceived ("the man smelled of alcohol"). A conclusion is an interpretation or judgment ("the man was drunk"). Reports should contain observations only.
- You arrive at an incident scene and find an abandoned bag. What do you do?
Answer: Do not touch it. Clear people from the area. Call 911. Notify church leadership. Do not attempt to open or move it.
- Why is it important to get witness contact information immediately after an incident?
Answer: Memory degrades quickly. Witnesses who leave without giving their information may be impossible to locate, and their recollections become less reliable over time.
- A local news crew shows up after an incident and asks you what happened. What do you say?
Answer: Nothing. Direct all media inquiries to the church's designated spokesperson. Do not provide any information or comment.
- Who are the appropriate people to share an incident report with?
Answer: Church leadership, your security team lead, and law enforcement when required. Not other congregants, family members, or the media.
🎭 Module 8 — Scenario-Based Exercises & Written Assessment
Module 8 — Scenario Exercises & Certification Assessment
1.25 Hours IN-PERSON REQUIRED Materials: Scenario cards, answer sheets, certificates
📋 Instructor Note: Run all three scenarios as tabletop exercises (verbal walk-through) OR as physical role-plays if space and time allow. After each scenario, debrief using the questions provided. Scenarios should feel real — use your actual church building as the setting if students are from your church.
🎭 Scenario 8A — Medical Emergency During Service
Situation: During the sermon, a 68-year-old man in the fourth row collapses. His wife screams. The congregation turns. The pastor stops speaking.
Discussion questions:
- What is your first action? (Call 911)
- How do you manage the crowd gathering around the patient?
- Who guides EMS to the patient when they arrive?
- What does the security officer do while medical response is happening?
- What gets documented and when?
🎭 Scenario 8B — Angry Former Member
Situation: A man who was asked to leave the church six months ago after a conflict with the pastor walks in during service. He is not banned by formal trespass notice, but leadership has asked he not return. He sits down in the back row and is quietly seething. The pastor sees him and signals the security team with a concerned look.
Discussion questions:
- Do you have the right to remove him? (No formal trespass = complicated; call leadership first)
- How do you approach him without causing a scene?
- What do you say? (Apply LEAPS — acknowledge him, make him feel respected, offer a face-saving path)
- What if he refuses to leave?
- What is the lesson here about getting formal trespass notices in writing BEFORE you need them?
🎭 Scenario 8C — Suspicious Individual, Escalating Concern
Situation: A man enters the main sanctuary 15 minutes after service begins. He is wearing a heavy coat despite warm weather. He does not pick up a bulletin. He does not make eye contact with anyone. He sits in the back row nearest the exit. He does not participate in worship. He is watching the stage area with fixed attention. He has not done anything overtly threatening.
Discussion questions:
- What behavioral indicators are present? (Heavy coat, avoidance, target glancing, not engaging)
- At what point, if any, do you approach him?
- How do you approach — what do you say?
- What if he gets up and moves toward the stage?
- At what point do you call 911?
- What is the OODA Loop in action here?
📋 Instructor Note: Distribute answer sheets. Students may NOT use notes. Allow 25 minutes for the exam. Grade and return before dismissal if possible. Passing score: 75% (30/40). Review all missed questions with any student scoring below 80%.
📝 CUCSO Written Assessment — 40 Questions
- A church security officer's legal authority is derived from: (A) The state (B) The church or organization (C) Federal law (D) Training certification
Answer: B
- The de-escalation first principle means: (A) Never use physical force (B) Always try verbal communication before calling 911 (C) De-escalation is the preferred primary response; force is a last resort (D) Security officers cannot use force
Answer: C
- Which SSSF governing principle states that the security officer's goal includes protecting the life of an aggressor? (A) Legal Accountability (B) De-Escalation First (C) Preservation of Life Above All (D) Sound Judgment Under Pressure
Answer: C
- Baseline behavior in a church setting refers to: (A) Minimum expected attendance (B) Normal patterns of congregant behavior in that environment (C) The legal standard for use of force (D) The minimum training requirement
Answer: B
- Which of the following is a pre-attack behavioral indicator? (A) Singing loudly during worship (B) Arriving late to a service (C) Wearing heavy clothing on a warm day with hands concealed (D) Sitting near the back of the sanctuary
Answer: C
- OODA stands for: (A) Observe, Orient, Decide, Act (B) Organize, Operate, Defend, Alert (C) Observe, Order, Deter, Assess (D) Orient, Observe, Direct, Act
Answer: A
- A person in mental health crisis is MOST likely to display: (A) Calm, deliberate movement toward a specific target (B) Concealed weapons and target glancing (C) Confusion, disorientation, and response to internal stimuli (D) Pre-attack indicators consistent with planning
Answer: C
- In the LEAPS de-escalation model, "E" stands for: (A) Evaluate (B) Escalate (C) Empathize (D) Exit
Answer: C
- When de-escalating a verbal confrontation, your speaking volume should: (A) Match the agitated person's volume to assert authority (B) Be louder than normal to be heard clearly (C) Be lower and calmer than the agitated person (D) Be the same as normal
Answer: C
- The appropriate response when a person being de-escalated produces a weapon is: (A) Continue using verbal de-escalation techniques (B) Create distance, alert team, call 911, evacuate others (C) Immediately attempt to disarm the individual (D) Negotiate for the weapon's surrender
Answer: B
- The "greeter-guardian balance" refers to: (A) Having two security officers at every door (B) Balancing a welcoming presence with security awareness at the entrance (C) Alternating between greeter and security roles each week (D) The legal balance between public access and private security
Answer: B
- A trespass notice must be: (A) Verbal only (B) Approved by law enforcement (C) In writing (D) Signed by a judge
Answer: C
- A child's parent arrives to pick them up from the nursery but is not on the authorized pickup list. You should: (A) Release the child if the parent presents ID (B) Not release the child; contact the child's other parent or guardian (C) Call the child's name and let them decide (D) Release the child after getting a signature
Answer: B
- In Run-Hide-Fight, Fight is appropriate: (A) Whenever a security officer feels threatened (B) As the first response to an active shooter (C) Only as an absolute last resort when death is imminent and Run/Hide are not possible (D) When the security officer is physically capable
Answer: C
- During a lockdown, the all-clear signal should come from: (A) Any security team member who has verified the threat is gone (B) The senior pastor (C) Law enforcement or the designated authority per protocol (D) The first person to hear silence
Answer: C
- When law enforcement arrives at an active incident, you should: (A) Identify yourself and explain what happened immediately (B) Point toward the threat so officers know where to go (C) Keep hands visible, comply immediately with all commands (D) Hold your position until told to move
Answer: C
- The first action in any medical emergency is: (A) Begin CPR (B) Clear bystanders from the area (C) Call 911 (D) Locate the AED
Answer: C
- The radio phrase that clears a channel for emergency traffic is: (A) MAYDAY (B) BREAK BREAK BREAK (C) PRIORITY TRAFFIC (D) CLEAR THE AIR
Answer: B
- Security team members should rotate positions during a service every: (A) 15 minutes (B) 30-45 minutes (C) Hour (D) They should not rotate — stability is important
Answer: B
- When two security officers are stationed together, they should: (A) Face the same direction for unified response (B) Face opposite directions to maximize coverage (C) Stay within arm's reach of each other (D) Alternate between seated and standing positions
Answer: B
- In an incident report, "the man appeared intoxicated" is an example of: (A) A factual observation (B) An appropriate conclusion (C) A legal determination (D) Speculation that should not be in a report
Answer: D — write "the man smelled of alcohol and had slurred speech" instead
- An incident report should be shared with: (A) The congregation to maintain transparency (B) Any staff member who asks (C) Church leadership, security team lead, and law enforcement when required (D) The media for public accountability
Answer: C
- When preserving a potential crime scene, you should: (A) Document and photograph everything before law enforcement arrives (B) Remove any dangerous items immediately (C) Not disturb the scene; leave it for law enforcement (D) Clean the area to protect the church's image
Answer: C
- Behavioral baseline applies to: (A) All churches universally (B) Your specific worship environment and its normal patterns (C) The national average for church security incidents (D) The baseline training requirements for security officers
Answer: B
- A pre-service briefing should include: (A) A discussion of last week's sermon (B) Known threats, position assignments, radio channel, and chain of command (C) A review of the week's offering totals (D) Attendance numbers from the previous week
Answer: B
- The four stages of conflict escalation in order are: (A) Crisis, Trigger, Escalation, Recovery (B) Trigger, Escalation, Crisis, Recovery (C) Escalation, Trigger, Recovery, Crisis (D) Trigger, Crisis, Escalation, Recovery
Answer: B
- Which of the following is NOT appropriate non-verbal de-escalation behavior? (A) Keeping hands visible and open (B) Maintaining a slight body angle (C) Squaring up directly facing the agitated person (D) Keeping a distance of at least six feet
Answer: C — squaring up reads as a challenge and escalates
- Children's ministry lockdown procedures should be: (A) Identical to the main sanctuary procedure (B) Developed only after a real incident occurs (C) Trained separately with specific staff responsible (D) Optional if the church has fewer than 50 children
Answer: C
- Personal liability for a church security officer means: (A) The church is always responsible for the officer's actions (B) The officer can be personally sued or charged for improper use of force (C) The officer is protected by the same immunity as a police officer (D) Liability only applies if the officer has a security license
Answer: B
- A local news crew arrives after an incident. As a security officer, you should: (A) Give them a brief factual account (B) Refer them to law enforcement (C) Direct them to the church's designated spokesperson and provide no information yourself (D) Ask them to wait until you review your incident report
Answer: C
- The OODA Loop is best used when: (A) Writing incident reports (B) Conducting pre-service briefings (C) Making real-time security decisions under pressure (D) Training new security team members
Answer: C
- A congregant approaches you and asks about an incident that happened last Sunday. You should: (A) Give them a general overview to maintain community trust (B) Refer them to the pastor and provide no details (C) Share the basic facts since they are a member of the church (D) Ask them why they want to know before deciding
Answer: B
- Empathy in de-escalation means: (A) Agreeing with the agitated person's position (B) Acknowledging their emotional state without necessarily agreeing with their actions (C) Expressing sympathy for their situation (D) Avoiding confrontation by conceding their demands
Answer: B
- When approaching a potentially agitated individual, your initial distance should be at least: (A) 3 feet (B) 6 feet (C) 10 feet (D) 15 feet
Answer: B
- The security officer's role in an active shooter event as an unarmed officer is primarily: (A) To confront and stop the shooter (B) To direct evacuation, help others hide, and support law enforcement response (C) To lock down the building and wait (D) To identify the shooter for responding officers
Answer: B
- A custody dispute at the children's check-in desk should be resolved by: (A) The security officer using their judgment about who the child should go with (B) The children's ministry director (C) Calling 911 — this is a law enforcement matter (D) The senior pastor
Answer: C
- "Tunnel vision" as a pre-attack indicator refers to: (A) A person wearing sunglasses indoors (B) A person who is not responding normally to social cues and is fixated on a specific area or person (C) A person who appears visually impaired (D) A person reading intently from a phone or book
Answer: B
- An incident report's language should be: (A) Detailed and include the officer's professional opinion (B) Brief and to the point, excluding irrelevant details (C) Objective and factual, containing only what was directly observed (D) Written from the perspective of the victim
Answer: C
- The Recovery stage of conflict escalation is the appropriate time to: (A) Confront the person about their behavior (B) Apply physical restraint if needed (C) Re-engage with compassion, without lecturing or shaming (D) Call law enforcement to document the incident
Answer: C
- Why is it important that security officers dress like the congregation? (A) To avoid appearing threatening to visitors (B) To make it harder for a threat actor to identify and target them first (C) Both A and B (D) Church policy requires it
Answer: C
- The primary purpose of the SSSF CUCSO certification is: (A) To qualify for armed church security duty (B) To replace the need for law enforcement at church (C) To ensure church security personnel have consistent, evidence-based training guided by de-escalation and life preservation (D) To satisfy state licensing requirements
Answer: C
Shepherd's Shield Safety Foundation
"Protecting the Flock. Preserving Life. Glorifying God."
CUCSO Curriculum v1.0 — For CCSI Instructors Only — CONFIDENTIAL