Threat assessment and school discipline: Threat Assessment vs. Discipline: What Schools Need to Know
Why school threat assessment and student discipline are different processes, how they work together, and what NTAC research says about suspension and expulsion.
When a student says or does something alarming, the first instinct is often discipline: suspend, expel, or refer to police. Sometimes a consequence is warranted. But discipline and threat assessment answer different questions, and treating one as the other can make a school less safe, not more.
Two different questions
| Discipline | Threat assessment | |
|---|---|---|
| Question | Did the student break a rule, and what's the consequence? | What's going on with this student, and what will make a good outcome more likely? |
| Focus | The incident | The student's thinking, behavior, and circumstances over time |
| Trigger | A code of conduct violation | Any concerning behavior, including behavior that breaks no rule |
| Outcome | A consequence | An individualized management plan of supports and safety measures |
| Ends | When the consequence is served | When the team is no longer concerned |
Many concerns that reach a threat assessment team involve no rule violation at all: withdrawal, a sharp drop in grades, a worrying post. NTAC deliberately sets a low threshold for intervention so teams can help students "before their behavior escalates."
What NTAC research found
NTAC's 2019 study of targeted school attacks, Protecting America's Schools, found that most attackers had a history of school disciplinary actions, and that "punitive measures are not preventative." It also found that some attacks took place on the first day the attacker returned to school after an absence, including suspension, and that in two cases the attacker was actively suspended at the time.
NTAC's operational guide adds:
- "Removing a student from school does not eliminate the risk to the school community." Several school attacks have been carried out by former students who had been removed from the school or aged out.
- A suspended or expelled student "might become isolated from positive peer interactions or supportive adult relationships at school."
- Teams should "develop strategies to stay connected" to a suspended or expelled student, to see whether things are getting worse.
How the two work together
A student can face consequences for a rule violation while the threat assessment team works on the concern underneath it. To keep them coordinated:
- Run them as separate processes with separate records and decision-makers where possible, but with the team informed of disciplinary decisions.
- Consider monitoring before removal. If suspension or expulsion is necessary, decide beforehand how the team will stay in contact and who will check in.
- Plan the return. NTAC's findings about attacks on the first day back suggest re-entry deserves deliberate planning: a check-in on day one, a trusted adult, and clear supports.
- Apply discipline fairly. NTAC recommends disciplinary practices "that ensure fairness, transparency with the student and family, and appropriate follow-up."
- Protect the reporting culture. If reports routinely lead to punishment, students stop reporting. Make sure students and staff understand that reporting is about getting someone help.
An example from NTAC's guide
NTAC describes a student suspended for drug possession who then posted a concerning video. An administrator met with the student and his father. There was no immediate safety concern, but the student was dealing with a terminally ill father, a mother with mental illness, removal from the wrestling team, and missed tutoring sessions because he was driving his father to medical appointments.
Instead of escalating the discipline, the school worked with community services to arrange transportation for his father, counseling, and a plan for the student to return to campus and stay on track to graduate. That's the difference between responding to the incident and responding to the student.
Sources
- U.S. Secret Service National Threat Assessment Center, Enhancing School Safety Using a Threat Assessment Model (2018).
- U.S. Secret Service National Threat Assessment Center, Protecting America's Schools: A U.S. Secret Service Analysis of Targeted School Violence (2019).
Both are free at secretservice.gov/protection/ntac.
Frequently asked questions
Can a student be disciplined and assessed at the same time?
Yes. A student who breaks a rule can face consequences under the code of conduct while the threat assessment team works on the underlying concern. The two processes answer different questions and should be coordinated, not merged.
Does suspension make a school safer?
Not by itself. NTAC states that removing a student from school does not eliminate the risk, and that a suspended or expelled student may become isolated from the adults and peers who could help. If removal is necessary, teams should stay connected with the student.
Will students stop reporting if threat assessment feels like punishment?
That's the risk. NTAC's guidance stresses that students need to see reporting as seeking help, not snitching, and need to trust that reports will be handled appropriately.