The After-Action Review
The After-Action Review is where schools determine whether their emergency planning, training, drills, tabletop exercises, reunification procedures, and partner coordination actually worked. A school can build plans, buy equipment, train staff, and run exercises, but improvement happens only when leaders evaluate performance, identify gaps, assign corrective actions, and test those fixes again. The After-Action Review is where school safety improvement actually happens.
District leaders invest significant time in emergency operations planning, staff training, communications systems, Incident Command structures, community partnerships, and emergency exercises. All of that work matters. But the question that matters most comes after the activity ends: did the system perform the way the district expected it to perform?
An exercise is not valuable simply because it was completed. A drill is not successful simply because everyone participated. A plan is not validated simply because the event ended without obvious failure. The value comes from what the district learns afterward and what it changes because of that learning.
Table of Contents
Why the After-Action Review Matters - The improvement process begins after the exercise
What the Research and Guidance Say About After-Action Reviews
Building the Foundation Before the Review - A good After-Action Review starts before the exercise
How to Conduct an Effective After-Action Review - Compare what was supposed to happen with what actually happened - Look for strengths, not just problems - Ask why, not just what - Evaluate the system, not just the people - Include the people who actually did the work
Turning Findings Into an Improvement Plan - An After-Action Review without follow-through is incomplete - Close the loop with re-testing
Implementation Checklist for School Leaders - Policy and governance - Team and participation - Documentation and corrective action - Integrate the learning cycle
Why the After-Action Review Matters
Schools spend enormous amounts of time preparing for emergencies. Districts write emergency operations plans, establish protocols, purchase safety technology, train staff, build Incident Command System structures, coordinate with law enforcement and emergency responders, conduct drills, facilitate tabletop exercises, and practice reunification. Those activities are essential, but they do not improve school safety on their own.
Improvement happens when leaders stop after an exercise or incident and ask a set of disciplined questions:
What worked?
What did not work?
Why?
What did we expect to happen?
What actually happened?
What surprised us?
What needs to change?
What are we going to do about it?
Those questions shift a drill or exercise from an activity into an improvement process. Federal emergency management guidance supports that approach. FEMA's Homeland Security Exercise and Evaluation Program, or HSEEP, treats evaluation and improvement planning as essential parts of the exercise cycle. The process is designed to document strengths, identify areas for improvement, and turn those findings into corrective actions that strengthen readiness.
For K-12 schools, that principle should be foundational. The drill tests the system. The After-Action Review improves it.
The improvement process begins after the exercise
One of the most common questions after a school drill is, "How did it go?" The usual answer is, "It went well." That response is understandable, but it is not enough to improve preparedness.
A better set of questions is more precise:
What were we trying to test?
What did we expect to happen?
What actually happened?
Where did performance differ from expectations?
Those questions expose gaps that may be invisible in a quick debrief. A lockdown drill may appear successful because classroom doors were locked and students moved out of sight. But if the district was also testing campus-wide notification, substitute teacher readiness, accountability, communications redundancy, or law enforcement coordination, a simple "it went well" may hide important weaknesses.
The opportunity cost matters here too. If schools spend time conducting drills but fail to analyze performance, they lose one of the most valuable benefits of preparedness work. An exercise that reveals a weakness is not a failed exercise. It is a successful learning opportunity, as long as the district acts on what it found.
What the Research and Guidance Say About After-Action Reviews
Exercises are widely recognized as one of the best ways to test emergency plans, but their value depends on evaluation. The U.S. Department of Education has long described exercises as an integral component of school safety planning because they help validate courses of action, identify gaps and weaknesses, clarify roles and responsibilities, assess resources and capabilities, and strengthen coordination with community partners. That guidance aligns closely with the purpose of an After-Action Review.
The practical lesson is straightforward. Schools should expect exercises to reveal problems. If the purpose of the exercise is to identify weaknesses, then discovering them is not failure. The failure occurs when the school identifies a gap and does nothing about it.
This is similar to the larger lesson found throughout school safety research. Hardware, plans, staffing, and training only matter if they improve outcomes in real conditions. A district should apply the same discipline it uses when evaluating security measures to its preparedness efforts. The National Center for Education Statistics school safety data helps provide broad context on school safety conditions, while federal exercise doctrine such as HSEEP explains why evaluation and corrective action are essential to readiness.
The point is not to produce more paperwork. The point is to create a repeatable process that turns drills, exercises, and incidents into measurable improvement.
Preparedness Activity | What It Does | What the After-Action Review Adds |
|---|---|---|
Emergency operations planning | Establishes roles, procedures, and protocols. | Confirms whether the plan worked as intended in practice. |
Staff training | Builds awareness and role clarity. | Reveals whether people understood and applied the training correctly. |
Drills and exercises | Tests actions under controlled conditions. | Identifies strengths, gaps, and corrective actions. |
Community coordination | Connects the school with outside responders and partners. | Evaluates how well those partners integrated with school procedures. |
Reunification practice | Tests parent-student reunification operations. | Exposes bottlenecks, communication issues, and process failures. |
District leaders can also compare this improvement mindset with broader policy lessons in this analysis of what school district leaders can learn from research on school policing, especially when considering whether visible action is producing meaningful readiness.
Building the Foundation Before the Review
A high-quality After-Action Review does not begin after the exercise. It begins before the exercise starts. The quality of the review is directly connected to the quality of the exercise design.
If an exercise has vague objectives, the evaluation will also be vague. A district that says, "We are testing our emergency plan," will struggle to assess performance in a useful way. A district that identifies observable objectives can evaluate them.
Examples of clear objectives include:
Can the school initiate the correct emergency protocol within a defined timeframe?
Can staff implement the action correctly?
Can administrators establish Incident Command?
Can the school account for students and staff?
Can the district communicate accurate information internally and externally?
Can transportation support evacuation or reunification?
Can the school provide law enforcement with the information and access it needs?
Can the reunification team establish operations and process families according to the plan?
Those objectives can be observed, documented, and evaluated. Schools do not need to turn every exercise into a large federal process, but they can borrow the discipline. Know what you are testing. Observe it intentionally. Evaluate it afterward.
A good After-Action Review starts before the exercise
The most useful evaluation question is simple: what was supposed to happen, and what actually happened?
The distance between those two answers is where learning begins.
Imagine a reunification exercise. The written plan may say that families arrive at the reunification site, staff direct them to check-in, identification is verified, students are requested from the student assembly area, and students are reunited with approved adults through a controlled process.
That is what was supposed to happen.
Now compare it with what actually happened:
Traffic backed up into the roadway.
Some parents bypassed the greeting area.
Check-in staff could not access student information.
Several students were sent to the wrong location.
Radios did not work throughout the facility.
Parents posted conflicting information online.
Staff were unsure who could authorize changes to the process.
Reunification may still have occurred, but the district learned something far more valuable than a clean appearance of success. It learned where the plan broke down under realistic conditions.
That is why exercises matter, and why the After-Action Review matters even more.
How to Conduct an Effective After-Action Review
An effective After-Action Review should be structured, candid, and focused on performance. It should identify where the school met expectations, where it fell short, why those gaps existed, and what needs to happen next.
Compare what was supposed to happen with what actually happened
Start with the expected process. Document the plan, the objective, the timeline, and the intended sequence of actions. Then compare those expectations with observed performance.
This approach works across different scenarios:
Lockdown drills: Was the announcement heard in every part of campus, including gyms, cafeterias, portable classrooms, and outdoor areas?
Evacuation exercises: Did staff move students to the right location, account for them, and communicate status back to command?
Shelter operations: Did staff know who was responsible for student supervision, medical needs, and communication?
Reunification exercises: Did check-in, verification, student movement, and release function as planned?
Without this comparison, leaders are left with general impressions. With it, they gain evidence.
Look for strengths, not just problems
An After-Action Review should never become a hunt for mistakes or a venue for blame. If participants believe the goal is to identify who failed, they will become defensive, withhold useful information, and protect their departments rather than help improve the system.
A better approach is to evaluate performance, not personalities. Identify the strengths the district should sustain, along with the gaps it should address.
For example:
Staff may have implemented a protocol quickly because training language was simple and familiar.
Law enforcement integration may have gone smoothly because local officers participated in planning and exercises.
Student accountability may have worked well because campus teams used a clear reporting system.
A quality review asks two equally important questions:
What should we change?
What should we keep doing?
Both answers improve preparedness.
Ask why, not just what
Identifying a failure is only the beginning. Schools need to understand the condition that caused the failure before selecting a corrective action.
Suppose staff did not receive an emergency notification. It is easy to conclude that staff need retraining. But training may not be the real issue. The problem could be a weak PA system, missing users in the notification platform, unclear authority for sending alerts, poor coordination between systems, misunderstood terminology, or a message that did not clearly communicate the required action.
Each of those causes requires a different solution.
This is why strong After-Action Reviews keep asking why:
Was this a people problem?
A process problem?
A training problem?
A technology problem?
A policy problem?
A resource problem?
A communication problem?
Or did the plan itself rely on a faulty assumption?
Until the district understands the cause, it cannot confidently identify the fix.
Evaluate the system, not just the people
School safety is a system, so the After-Action Review should evaluate the system. It is easy to focus on whether teachers and staff performed correctly during a drill, but many other components affect outcomes.
Districts should evaluate:
Leadership and decision-making: Was authority clear?
Incident Command: Were roles established and understood?
Communication: Did information move internally and externally?
Technology: Did systems perform as expected?
Facilities: Did doors, access controls, exits, and other physical measures function properly?
Student accountability: Could the school determine who was safe, missing, injured, or out of place?
Community partnerships: Did law enforcement, fire, EMS, emergency management, and other partners integrate effectively?
Transportation: Could students be moved where they needed to go?
Reunification: Could the district transition from response to family reunification?
Continuity: What happened after the immediate emergency phase?
An exercise allows leaders to see whether these components function together. The After-Action Review is where those observations become actionable understanding.
Include the people who actually did the work
Another common mistake is limiting the review to administrators. Leadership should absolutely participate, but so should the people who experienced the event from different roles.
Teachers may identify barriers administrators never saw. Custodians may understand why a door did not operate as expected. Transportation personnel may identify routing issues that planners missed. School nurses may spot medical response concerns. Communications staff may have managed parent notifications and online rumors in ways others never observed. Law enforcement or emergency partners may have encountered access or information problems invisible to school personnel.
The Department of Education emphasizes collaboration with community partners across planning and exercises. The same principle applies to evaluation. If schools want to understand the whole system, they need perspectives from across the system.
District teams can also review this practical framework for building a culture of prevention, protection, and preparedness to connect preparedness activities with continuous improvement.
Turning Findings Into an Improvement Plan
The After-Action Review should not end with discussion. It should produce an improvement plan.
FEMA intentionally links after-action reporting and improvement planning. The purpose is not merely to document findings, but to monitor and implement corrective actions that improve preparedness over time.
An After-Action Review without follow-through is incomplete
A vague finding such as "communication needs improvement" is not enough. It does not identify the issue, the owner, the deadline, or the validation method.
A stronger finding looks like this:
Finding: Emergency notifications could not be heard in the east gym.
Corrective Action: Facilities and technology departments will evaluate PA coverage in the gym and identify a solution.
Owner: Director of Facilities.
Completion Date: October 15.
Validation: Re-test notification coverage during the November drill.
That level of detail turns a concern into a management task.
A strong improvement plan should answer:
What specifically needs to change?
Who owns the corrective action?
When will it be completed?
What resources are required?
How will the district know it was fixed?
That final question is often overlooked. Schools should not assume a corrective action worked. They should test it again.
Close the loop with re-testing
This is where school safety becomes a continuous cycle:
Plan -> Train -> Exercise -> Evaluate -> Improve -> Re-test
Then repeat.
The U.S. Department of Education's emergency planning guidance emphasizes regular review, practice, and updates based on lessons learned from exercises and related after-action reports. That means the After-Action Review is not separate from emergency planning. It feeds directly back into it.
If an exercise reveals a problem with reunification, revise the reunification annex. If staff misunderstand a protocol, adjust training. If Incident Command roles are unclear, clarify assignments. If a technology system fails, fix it or add redundancy. If transportation procedures do not work, rewrite them with transportation staff. If law enforcement needs different information, build that exchange into the plan.
Then exercise again.
The same disciplined approach also strengthens other areas of school safety. Teams that want a broader readiness lens can compare their processes with this practical framework for building a culture of prevention, protection, and preparedness and the five characteristics that make school safety work.
Using After-Action Reviews for Real Incidents
After-Action Reviews should not be limited to drills and exercises. Real incidents can provide some of the best information a district will ever receive about the performance of its systems.
Not every incident needs a lengthy report, but many events should trigger a structured review, including:
Severe weather
Medical emergencies
Secure actions
Lockdowns
Evacuations
Utility failures
Student or staff deaths
Threat incidents
Transportation emergencies
Reunifications
Any significant activation of an emergency procedure can teach the district something.
Ask:
What happened?
What worked?
What created confusion?
What would we do differently next time?
A real incident may reveal issues that no tabletop exercise could have predicted. Organizations that learn from those experiences become stronger. Organizations that simply return to normal lose the opportunity.
Districts should also avoid turning the review into a compliance document. The value is not in completing a form. The value is in what changes because of the review. SchoolSafety.gov exercise resources provide practical tools and templates that can help schools use exercises and incident reviews to validate or update emergency operations plans, policies, and procedures while identifying gaps and areas for improvement.
Implementation Checklist for School Leaders
A strong After-Action Review process should leave an operational trail. Leaders should know what was tested, participants should know how the review works, departments should know who owns corrective actions, and the district should know how findings will be integrated back into plans, training, and future exercises.
Policy and governance
Define the AAR process: Establish when a review is required, who leads it, which events trigger a formal report, and how findings relate to policy and planning.
Align with emergency planning: Make sure the AAR process connects directly to the emergency operations plan, annexes, and emergency communication procedures.
Review partner agreements: Confirm memoranda of understanding with law enforcement, emergency management, transportation, health partners, and reunification support partners.
Schedule routine review: Revisit the process after exercises, incidents, staffing changes, legal updates, or facility changes.
Team and participation
Include cross-functional voices: Involve administrators, teachers, mental-health personnel, transportation, facilities, communications staff, school nurses, and public-safety partners.
Use evaluators intentionally: Assign observers based on the objectives being tested so the district captures meaningful information.
Brief participants in advance: Make sure teams understand the purpose of the exercise, the evaluation criteria, and the review process.
Create psychological safety: Frame the review around performance and improvement, not blame.
Documentation and corrective action
Document expected performance: Record what was supposed to happen before the exercise begins.
Capture observations consistently: Use notes, evaluator forms, timelines, and communications records where appropriate.
Write specific findings: Avoid vague statements. Identify the exact issue, the cause if known, and the operational impact.
Assign corrective actions: Every major finding should have an owner, due date, required resources, and a validation method.
Track completion: Improvement plans should be monitored until action is completed and re-tested.
Integrate the learning cycle
Update plans: Revise emergency procedures, annexes, and protocols based on findings.
Adjust training: Corrective actions often require revised staff training, role clarification, or partner coordination.
Re-test solutions: Use the next drill, tabletop exercise, or functional exercise to confirm the fix worked.
Apply the same process to real incidents: Treat real activations as opportunities to improve the system.
Districts should seek external support when they need help designing exercises, facilitating reviews, building improvement plans, clarifying command roles, integrating community partners, or translating findings into practical plan updates. A qualified school safety consultant can help make the process manageable and operational.
Where School Safety Improvement Actually Happens
Schools invest substantial resources in safety. They build plans, implement systems, train staff, establish protocols, purchase technology, strengthen facilities, coordinate with community partners, conduct drills, and facilitate exercises.
But eventually, leaders have to determine whether all of those investments work together the way they intended.
That is what the After-Action Review provides.
It creates an intentional moment to ask:
What did we learn?
What should we keep?
What should we change?
What are we going to do next?
That is a different standard from asking whether everyone looked prepared or whether the exercise finished on schedule.
A successful exercise is not one where nothing goes wrong. A successful exercise is one where the district learns something valuable without having to wait for a real emergency to teach the lesson.
Then it acts on that lesson.
At School Safety Solutions, we believe that emergency planning, staff training, drills, tabletop exercises, reunification exercises, and other preparedness efforts should all lead toward continuous improvement. The goal is not simply to build a good plan. It is to build an organization capable of learning.
After your next drill, tabletop exercise, real-world activation, or reunification exercise, do not stop when the activity ends. Gather the people involved. Talk about what happened. Identify the strengths. Find the gaps. Ask why. Assign corrective actions. Set deadlines. Update the plan. Then test it again.
Because the exercise tells you how your school safety system performed. The After-Action Review determines what you do with what you learned.
School Safety Solutions provides school safety consulting, security and safety assessments, behavioral threat assessment support, emergency operations planning, staff training, tabletop exercises, and reunification planning. Visit School Safety Solutions or contact the team at 512-387-6729 or info@schoolsafetysolutionsllc.com to discuss practical next steps.
Comments