Code Silver & Hospital Workplace Violence Response

Code Silver is the hospital emergency code that signals an active threat involving a weapon or armed intruder, and it sits at the sharp end of a broader healthcare workplace-violence program. An effective response combines a written prevention plan, staff training in de-escalation and Run-Hide-Fight adapted for patients who cannot flee, controlled access, a rehearsed lockdown, and pre-established coordination with law enforcement — all built to satisfy OSHA and The Joint Commission and, above all, to protect people who are already vulnerable.

Hospitals are among the most dangerous places in America to work, and the reason is structural. A healthcare facility is a public building that never closes, that must admit anyone in distress, that concentrates medication, valuables, and emotionally overwhelmed people in the same corridors, and that asks its staff to care for patients rather than defend themselves. Add weapons to that environment and the ordinary response of a corporate office — everyone evacuates — becomes impossible, because a ventilated patient, a surgical case mid-procedure, or a locked behavioral-health unit cannot simply run out the nearest exit. This guide is written for the hospital administrator, chief nursing officer, general counsel, security director, and health-system board member who own that risk. It explains what a Code Silver is, why healthcare violence is uniquely severe, what regulators now demand, how Run-Hide-Fight must be rewritten for patient-care settings, and how to build a program that performs on the worst day rather than looking complete on paper.

What is a Code Silver, and how does it differ from other hospital codes?

Hospitals use color-coded overhead announcements so staff can respond to an emergency without alarming patients and visitors. Code Blue signals a cardiac arrest, Code Red a fire, and Code Silver an active threat involving a person with a weapon or an active-shooter situation. The code is a communication tool, not a plan — its value depends entirely on what staff have been trained to do the moment they hear it. A facility where “Code Silver” produces confused staring in the corridor has a code but no capability.

It is worth noting that code terminology is not perfectly standardized across the country. Many systems have adopted plain-language activation — announcing “active shooter, second floor, east wing” rather than a color — precisely because a color code means nothing to visitors and can slow the recognition that matters most in the first seconds. Whether a facility uses a color or plain language, the operational requirement is the same: instant, unambiguous notification that reaches every person in the building, tells them where the threat is, and triggers a rehearsed response. Standardizing terminology within a health system, and ideally across a region, removes a dangerous point of hesitation when staff float between facilities.

Why is healthcare among the most violent workplaces in America?

Federal data has been consistent for years: healthcare and social-service workers experience workplace-violence injuries at rates far above the private-sector average. According to OSHA, workers in healthcare settings absorb a disproportionate share of the nation’s nonfatal workplace-violence injuries, and the U.S. Bureau of Labor Statistics has repeatedly documented that healthcare workers face substantially higher rates of intentional injury by another person than workers in most other industries. The problem is also chronically underreported, because clinical staff often treat aggression from patients as an expected part of the job rather than a recordable incident.

The causes are specific to the environment. Emergency departments run at capacity with long waits and acute stress. Behavioral-health and substance-use patients may be agitated, intoxicated, or in crisis. Facilities operate around the clock with public access and, frequently, minimal after-hours screening. Grief, pain, fear, dementia, delirium, and the presence of firearms in the community all converge on the same square footage. Most healthcare violence is not a headline active-shooter event — it is the daily grind of Type II violence, in which the aggressor is a patient or visitor. But the daily grind and the catastrophic event share the same root exposure, and a program that only prepares for one will fail at the other.

Understanding the taxonomy of workplace violence is the starting point for any credible program, because each type demands different controls. The framework below is the standard used by OSHA, the FBI, and the security profession.

Type	Aggressor’s relationship to the facility	Typical healthcare scenario	Primary controls
Type I — Criminal intent	No legitimate relationship; commits a crime	Robbery of pharmacy, ED, or parking structure	Access control, lighting, surveillance, cash/drug security
Type II — Patient/visitor	Receiving or connected to care	Agitated patient, distraught family member, behavioral crisis	De-escalation training, screening, staffing, behavioral protocols
Type III — Worker-on-worker	Current or former employee	Harassment, threats, or violence between staff	Threat assessment, HR policy, termination protocols
Type IV — Personal relationship	Personal tie to an employee	Domestic partner confronting a nurse at work	Threat management, controlled access, safety planning

The strategic error most facilities make is investing exclusively against the rare Type I active shooter while leaving Type II and Type IV — the sources of nearly all actual injuries — addressed by wishful thinking. A world-class program allocates attention in proportion to real risk while still preparing decisively for the low-frequency, high-consequence armed event.

What do OSHA and The Joint Commission require of hospitals?

There is no single federal OSHA standard dedicated to healthcare workplace violence, but the absence of a named rule does not mean the absence of obligation. OSHA enforces workplace-violence hazards under the General Duty Clause, Section 5(a)(1) of the OSH Act, which requires employers to furnish a workplace free from recognized hazards likely to cause death or serious physical harm. Because healthcare violence is a well-documented, recognized hazard, a hospital that fails to implement feasible controls can be — and has been — cited. OSHA’s Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers lays out the expected framework: management commitment and worker participation, worksite analysis and hazard identification, hazard prevention and control, training, and recordkeeping with program evaluation. Several states operate their own OSHA-approved plans with explicit healthcare workplace-violence regulations, raising the bar further for facilities in those jurisdictions.

Accreditation adds a second, sharper layer. The Joint Commission has established workplace-violence prevention requirements for accredited hospitals covering leadership oversight, a defined reporting and data-analysis process, ongoing worksite risk assessment, education and training, and post-incident procedures for support and analysis. For an accredited facility, these are not aspirational — they are surveyed. The practical synthesis for leadership is straightforward: regulators and accreditors now expect a documented, data-driven, continuously improving program, and the organization that cannot produce its risk assessments, training records, incident data, and corrective actions is exposed on compliance grounds long before any violent event occurs.

How do you adapt Run-Hide-Fight for a patient-care environment?

The federal Run-Hide-Fight model — promoted by CISA and the FBI — is sound doctrine for an office or a school, where the overriding priority is to get everyone out. It cannot be transplanted into a hospital unmodified, because a large fraction of the people in the building physically cannot run. A patient on a ventilator, a surgical patient under anesthesia, a laboring mother, an infant in the NICU, a dialysis patient tethered to a machine, or a locked behavioral-health unit changes the calculus entirely. Staff face an agonizing reality that office workers never do: their duty of care to patients competes with their instinct for self-preservation.

Elite healthcare security reframes the model around the patient’s mobility and the unit’s function. The core adaptations are these:

• Evacuate (Run) where movement is possible. Ambulatory patients, visitors, and staff in areas away from the threat should move to safety along pre-identified routes, just as in any facility — but healthcare adds the duty to assist those who can be moved quickly.
• Secure-in-place (Hide), engineered, not improvised. For non-ambulatory patients, the emphasis shifts to barricading and locking down the unit — doors that lock from inside, heavy furniture as barricades, lights off, devices silenced, and staff positioning themselves and patients out of sightlines. This is why door hardware, lock function, and unit design are life-safety decisions, not facilities trivia.
• Defend (Fight) as a last resort, with what is at hand. If confronted with no alternative, staff are taught that improvised action to disrupt an attacker — using the equipment and numbers available — is survivable doctrine, however far it sits from clinical instinct.
• Protect the immovable. The uniquely healthcare principle: for patients who cannot be moved — the OR, the ICU, the NICU — the plan must pre-designate how staff shield, conceal, and secure them, because “run” is simply not on the table.

None of this works if it is discovered for the first time during an event. The adaptations must be trained, walked, and rehearsed unit by unit, because the correct action in the ED differs from the correct action in labor and delivery, which differs again from a psychiatric unit. Generic training delivered from a slide deck produces a false sense of readiness that evaporates under fire.

Where does de-escalation fit, and why is it the highest-yield investment?

Because the overwhelming majority of healthcare violence is Type II — patients and visitors in crisis rather than criminals with intent — de-escalation is statistically the single most valuable capability a facility can build. Most incidents move through observable stages: anxiety, escalating verbal agitation, and only then physical aggression. Staff trained to read those stages and intervene early can defuse a situation before it ever requires a physical response, protecting both the worker and a patient who is often frightened, in pain, or clinically impaired rather than malicious.

Credible de-escalation training is behavioral and rehearsed, not a poster in the break room. It teaches recognition of pre-assault indicators, verbal and non-verbal techniques, safe positioning and personal space, team response so no clinician stands alone with an escalating patient, and clear thresholds for when to summon security or activate a behavioral-emergency response. It also demands the organizational courage to support staff who withdraw from a dangerous encounter rather than pressuring them to “handle it.” A facility that trains de-escalation seriously reduces both the frequency of violence and the severity of the events that still occur — and it does so while improving, not compromising, patient care.

How should a hospital integrate with law enforcement?

When a weapon is present, the objective of hospital staff is to survive, protect patients, and buy time until police arrive — not to resolve the threat. That makes the quality of law-enforcement integration decisive, and it must be arranged long before an incident. Responding officers who have never seen the building, do not have current floor plans, cannot access live camera feeds, and do not understand which units cannot be evacuated will lose precious minutes orienting themselves. The facilities that respond best have done the unglamorous pre-work.

That pre-work includes sharing current floor plans and providing law enforcement and fire/EMS familiarization walk-throughs; establishing radio interoperability or a reliable communication bridge; agreeing on unified command and staging under the incident-command framework; pre-planning how officers gain rapid access through controlled entrances during a lockdown; and jointly exercising the response so the first time police and clinical leadership work together is not the real event. Facilities with sworn officers or contracted security must also define, in policy and in training, the specific role and rules of engagement of any armed personnel — a decision that carries profound liability, clinical, and community implications and must be made deliberately at the governance level, never by default.

How do you build a healthcare workplace-violence program? A practical framework

A defensible program — one that satisfies OSHA and The Joint Commission and actually protects people — follows a recognizable arc. The framework below maps to regulatory expectations and to what elite security practice regards as reasonable.

1. Secure leadership commitment and governance. Assign accountable ownership at the executive and board level, fund the program, and establish a multidisciplinary committee spanning security, nursing, medicine, HR, legal, and frontline staff.
2. Conduct a worksite risk assessment. Analyze incident data, walk every unit, and identify environmental, staffing, and procedural hazards — from ED sightlines and egress to after-hours access and high-risk departments.
3. Engineer the environment. Implement access control, visitor management and screening where warranted, duress alarms, surveillance, appropriate lock and door hardware, safe-room and barricade capability, and lighting — controls proportionate to each area’s risk.
4. Build a behavioral-threat-assessment capability. Establish a process to identify, assess, and manage concerning behavior — from a threatening ex-partner (Type IV) to a distressed employee (Type III) — before it becomes violence.
5. Train the whole workforce. Deliver role-specific de-escalation, Run-Hide-Fight adapted for patient care, unit-by-unit lockdown procedures, and reporting expectations — refreshed and exercised, not one-and-done.
6. Establish notification and lockdown mechanics. Standardize activation terminology, ensure every space can be alerted instantly with the threat’s location, and verify that lockdown functions physically work as designed.
7. Integrate law enforcement and EMS in advance. Share plans, run joint walk-throughs and exercises, and define command, access, and any armed-personnel roles before an event.
8. Report, analyze, and improve. Make reporting easy and non-punitive, analyze trends, act on the data, support victims after incidents, and document everything — because the program’s legal defensibility and its real-world effectiveness both live in the records.

The through-line, as with all serious risk work, is documentation and rehearsal. A plan that has never been exercised is a hypothesis, and in a dispute the difference between a defensible hospital and a negligent one is rarely intention — it is whether the assessments, training, and corrective actions were recorded.

How does Honeybadger support healthcare security?

Honeybadger Solutions supports hospitals and health systems as an intelligence-led discipline, coordinated from Arizona home command and delivered nationwide. Our work centers on the parts of the problem that determine outcomes: worksite risk assessment, Code Silver and workplace-violence program design aligned to OSHA and The Joint Commission, de-escalation and adapted Run-Hide-Fight training built unit by unit, behavioral-threat assessment, and the pre-planning that makes law-enforcement integration real rather than theoretical. Because our healthcare and hospital security practice is paired with in-house background intelligence and investigations, we can assess a named threat — a stalking ex-partner, a terminated employee, an escalating individual — and fold that intelligence into a facility’s protective posture, closing gaps that a guard contract alone never addresses.

When a mandate calls for physical or armed protective operations on site, Honeybadger delivers them through a commanded vetted-partner network: threat assessment, planning, tradecraft standards, and single-point accountability are centralized under Arizona command, while operations are executed by rigorously vetted, jurisdiction-licensed teams. Our established armed and executive-protection theaters are California, Texas, and Florida, with Arizona as home command and other regions served on a mandate and expansion basis, scoped case by case. This gives a health system one accountable partner and a consistent standard of tradecraft — supported by security and investigative depth — without the fiction that any single firm staffs a fully armed office in every city it serves. For Arizona facilities, that capability is anchored across our Casa Grande headquarters and our Phoenix and Oro Valley offices.

Frequently asked questions

What does a Code Silver mean in a hospital?

Code Silver is the emergency code many hospitals use to signal an active threat involving a weapon or armed intruder, so staff can respond quickly without alarming patients and visitors. Terminology is not universal, and many systems now use plain-language announcements that name the threat and its location instead. Either way, the code is only as good as the trained, rehearsed response it triggers.

Why can’t hospitals just use standard Run-Hide-Fight?

Because many patients physically cannot run — a ventilated ICU patient, a surgical case under anesthesia, a newborn in the NICU, or a locked behavioral-health unit. Healthcare adapts the model by emphasizing engineered secure-in-place and barricade tactics for non-ambulatory patients, assisting those who can be moved, and pre-designating how staff shield the immovable, with defense as a last resort. It must be trained unit by unit.

Does OSHA require a hospital workplace-violence program?

There is no single named federal standard, but OSHA enforces workplace violence as a recognized hazard under the General Duty Clause, and its healthcare guidelines set the expected framework. The Joint Commission also imposes surveyed workplace-violence prevention requirements on accredited hospitals, and several states have their own regulations. In practice, a documented, data-driven prevention program is effectively required.

What is the most effective way to reduce hospital violence?

De-escalation training delivers the highest yield, because most healthcare violence comes from patients and visitors in crisis rather than criminals with intent. Staff trained to recognize escalation early and intervene safely prevent many incidents from ever becoming physical. That is layered with environmental controls, behavioral-threat assessment, notification and lockdown mechanics, and pre-planned law-enforcement integration for the rare armed event.