A bomb threat at a live event requires a calm, coordinated, pre-planned response. Threats vary widely in credibility, and the response—including whether to evacuate—must be informed by law enforcement, not driven by panic. This article covers the documented protocol for bomb threats at live events, what staff must know, and how authority is shared between event organizers and law enforcement.

Receive, Record, Report

If a bomb threat is received by telephone, the person receiving the call should keep the caller on the line as long as possible and record as much information as possible. The U.S. Department of Homeland Security’s Bomb Threat Guidance (DHS, 2019) and the FBI both provide bomb threat call checklists for this purpose. Key information to capture includes:

• Exact words used by the caller
• Time of call and duration
• Characteristics of the caller’s voice (calm, excited, accent, estimated age)
• Background sounds (traffic, music, machinery, voices)
• Location of the alleged device
• Claimed detonation time
• Reason given for the threat

This information must be passed immediately to police for evaluation. DHS (2019) is explicit: do not delay notification while attempting internal assessment. Law enforcement is trained to evaluate threats; your staff are not.

Who Decides Whether to Evacuate?

This question must be answered in advance and documented in your major incident plan—not resolved in real time under pressure. DHS’s Bomb Threat Guidance (2019) and FEMA’s NIMS framework (2017) both identify law enforcement as the lead agency for threat evaluation. Generally, the decision to evacuate or relocate people rests with the event organizer, informed by police assessment of the threat’s credibility.

There is an important exception: if a device is actually found, or if law enforcement has received specific credible intelligence, the senior law enforcement officer present may direct evacuation. All event personnel must understand in advance that law enforcement direction supersedes event organizer authority in those circumstances (FEMA, 2017). OSHA’s Emergency Action Plan standard (29 CFR 1910.38) requires that plans include specific procedures for reporting emergencies and for personnel to follow during an evacuation—these must be in writing and communicated to all employees before the event (Occupational Safety and Health Administration [OSHA], 2016).

Secondary Devices

A critical safety consideration in any bomb threat response is the risk of secondary devices—explosives intended to injure emergency responders or evacuating crowds. DHS (2019) and the FBI both advise that if a bomb threat is credible, evacuation routes and assembly areas must be selected with secondary device placement in mind. Do not automatically route evacuating crowds toward parking areas or away from the building without law enforcement guidance on where a secondary device might be placed. This is not a decision event staff can make without law enforcement input.

Staff Training

Every staff member who might receive a phone call or discover a suspicious package must be trained in the bomb threat protocol before the event opens. DHS (2019) recommends that training cover:

• How to use the bomb threat call checklist
• The importance of keeping the caller on the line
• Who to notify and through what communication channel
• What not to do: do not use two-way radios near a suspected device; do not touch, move, or open a suspicious package
• The distinction between a threat and a found device, and how the response differs

Staff training should be documented. OSHA’s General Duty Clause (Section 5(a)(1) of the OSH Act) requires employers to provide a workplace free from recognized hazards—and failure to train staff in bomb threat response has been cited in enforcement actions following incidents at public assembly venues (OSHA, 2016).

Suspicious Packages

If a suspicious package or device is found, staff should not touch, move, or examine it. Clear the immediate area, establish a perimeter, and notify law enforcement immediately. DHS (2019) advises that two-way radios and mobile phones should not be used within the immediate vicinity of a suspected device, as radio frequency energy may trigger certain detonator types. Restrict access to the area until law enforcement arrives and takes command of the scene.

Documentation

After the incident, document all actions taken, decisions made, the communication chain, and the timeline. OSHA’s recordkeeping requirements under 29 CFR 1904 apply if any work-related injury or illness results. Thorough contemporaneous documentation also supports any subsequent law enforcement investigation or civil proceeding (OSHA, 2016).

References

Federal Emergency Management Agency. (2017). National Incident Management System (3rd ed.). U.S. Department of Homeland Security.

Federal Bureau of Investigation. (n.d.). Bomb threat guidance. FBI.gov. https://www.fbi.gov

Occupational Safety and Health Administration. (2016). 29 CFR 1910.38: Emergency action plans; 29 CFR 1904: Recording and reporting occupational injuries and illnesses. U.S. Department of Labor.

U.S. Department of Homeland Security. (2019). Bomb threat guidance. DHS. https://www.dhs.gov