Code Grey: Managing Violence in Healthcare Settings

Code Grey is the overhead alert most hospitals use to summon rapid, coordinated help for a combative or violent person who is not known to be armed — the single most common security activation in American healthcare. A defensible response combines early de-escalation, a trained Behavioral Emergency Response Team, CMS-compliant restraint procedures, environmental design that reduces triggers, and documentation that satisfies OSHA and The Joint Commission long before any weapon is ever in question.

Ask an emergency-department charge nurse which alert she dreads more — an active shooter or a Code Grey — and most will answer without hesitation, because Code Grey is the one she has actually lived through, often more than once in a shift. Combative and violent patients and visitors are the daily operational reality of hospital security, not the rare catastrophic exception that dominates so much of emergency planning. An agitated patient in withdrawal, a family member overwhelmed by grief, a person in acute psychiatric crisis, a head-injury patient disoriented by pain — none of them arrives carrying a weapon, and none of them fits the active-shooter playbook that so many facilities over-index on. Yet the injuries they cause to nurses, technicians, and security officers are real, frequent, and, with the right program, substantially preventable. This guide is written for the hospital administrator, chief nursing officer, emergency-department medical director, security director, and general counsel who own that risk. It sets out what a Code Grey actually is, how it differs from the codes it is most often confused with, who should respond and how, what CMS and The Joint Commission require once restraint enters the picture, and how staffing and design reduce the frequency of the call in the first place.

What is a Code Grey, and how does it differ from Code Silver, Code Pink, and Code Blue?

Hospitals rely on short, overhead-friendly codes so staff can respond to an emergency instantly, without alarming the patients and families in earshot. Code Grey is the alert used by most facilities to signal a combative, agitated, or violent person — a patient, visitor, or occasionally a staff member — when no weapon is present or confirmed. It is fundamentally a behavioral emergency: the goal is to protect everyone in the vicinity, contain the situation, and de-escalate a person who is, more often than not, frightened, in pain, intoxicated, or clinically impaired rather than criminally motivated. That distinction shapes everything about the correct response, from who leads it to what tools are appropriate.

Code terminology is not perfectly standardized across the country, and a growing number of health systems have moved toward plain-language activation — announcing the behavior and location directly — specifically because color codes mean nothing to visitors and can slow recognition in the critical first seconds. Whatever vocabulary a facility uses, the operational requirement is the same: instant, unambiguous notification that reaches the right responders and tells them where to go. The table below shows how Code Grey relates to the other alerts it is most commonly confused with.

The operational stakes of that distinction are significant. A Code Grey that is handled correctly rarely requires law enforcement and almost never requires evacuation — it is managed by clinical and security staff working together in the room. The moment a weapon appears or is credibly reported, the event must immediately convert to Code Silver protocol: notify law enforcement, shift from de-escalation to survival doctrine, and treat non-ambulatory patients according to the facility’s adapted Run-Hide-Fight plan. A program that blurs this line — either by over-responding to every agitated patient as an armed threat, or by under-responding to a weapon because staff assume it is “just another Code Grey” — fails in both directions.

Why is Code Grey the most frequently activated code in most hospitals?

According to OSHA, healthcare and social-service workers experience workplace-violence injuries at rates far above the private-sector average, and the emergency department and behavioral-health unit consistently rank as the highest-risk locations inside any hospital. The reasons are structural rather than incidental. Emergency departments run at or above capacity with long waits, high acuity, and families under acute stress. Patients in withdrawal, intoxication, dementia, delirium, or acute psychiatric decompensation frequently cannot control their own behavior, no matter how well they are treated. Psychiatric patients are increasingly boarded in medical beds for hours or days awaiting an inpatient bed, in units never designed to hold them safely. And the facility itself must stay open to anyone in distress, twenty-four hours a day, with minimal ability to screen who walks through the door.

The practical result is that Code Grey activations outnumber every other security code combined in most hospitals, often by a wide margin. Common precipitating factors that a mature program tracks and designs around include substance intoxication and withdrawal syndromes, uncontrolled pain, sensory overload from a loud or chaotic environment, cognitive impairment from dementia or traumatic brain injury, acute psychiatric crisis including mania and psychosis, and simple prolonged wait times that erode a frightened family’s patience. None of these precipitants describe a criminal; they describe a clinical population that a well-run program is built to manage safely, repeatedly, and without escalation.

Who responds to a Code Grey, and what is a Behavioral Emergency Response Team?

The single highest-leverage structural decision a hospital can make is standing up a dedicated Behavioral Emergency Response Team (BERT) — a rapid-response model, analogous to a medical rapid-response team, purpose-built for behavioral crises rather than cardiac or respiratory ones. Facilities that rely on an ad-hoc crowd of whoever is nearby consistently see worse outcomes than facilities with a defined, trained, and drilled team that knows its roles before the overhead page ever sounds.

The team’s composition matters less than its rehearsal. A BERT that has never trained together will improvise under stress, and improvisation is where injuries — to patients and to staff — happen. Facilities that treat the BERT as a standing clinical program, with scheduled drills, defined activation criteria, and a named owner, consistently outperform facilities that treat behavioral emergencies as an unplanned interruption to the day.

What does an effective Code Grey response protocol look like, step by step?

A defensible protocol follows a recognizable escalation ladder, moving to the least restrictive intervention that will keep everyone safe and never skipping a rung unless the situation demands it. The framework below reflects what elite healthcare-security practice and current regulatory expectations both require.

1. Recognize the warning signs early. Rising volume, pacing, clenched fists, and refusal of instructions typically precede physical aggression by minutes — staff trained to notice this window can often resolve the situation before any code is needed.
2. Attempt verbal de-escalation first. A single trained staff member, ideally someone the patient already trusts, uses calm tone, non-threatening posture, and validating language before anyone else approaches.
3. Activate Code Grey with a precise location the moment de-escalation is failing or the person becomes physically threatening, so the response team is not guessing where to go.
4. Designate one primary communicator on scene; multiple people talking at once is one of the most reliable ways to accelerate an agitated person toward violence.
5. Clear the area of other patients, visitors, and nonessential staff to reduce the audience effect and the risk of collateral injury.
6. Apply the least restrictive physical intervention consistent with the team’s certified training only after verbal techniques have failed, using approved holds rather than improvised force.
7. Escalate to physical or chemical restraint only when clinically indicated, ordered by a licensed independent practitioner, and applied by staff trained in the specific technique.
8. Convert immediately to Code Silver protocol if a weapon is seen or credibly reported at any point — the response model changes entirely, and law enforcement must be notified without delay.
9. Document continuously: time of onset, observed behavior, interventions attempted, and staff response, because this record is what regulators, insurers, and courts will later evaluate.
10. Debrief the team immediately afterward, before anyone returns to routine duties, and feed the incident into the facility’s ongoing workplace-violence data and program-improvement cycle.

The through-line is restraint of a different kind — institutional restraint from over-reacting, and rehearsed discipline in not under-reacting. Programs fail in both directions: by allowing security to physically engage too early, escalating a frightened patient into a fight, or by allowing verbal de-escalation to continue too long after it has demonstrably stopped working.

What do CMS and The Joint Commission require once restraint or seclusion is used?

The moment a Code Grey results in physical or chemical restraint, the hospital moves from a security matter into a federally regulated clinical event. The Centers for Medicare & Medicaid Services Condition of Participation governing restraint and seclusion, codified at 42 CFR § 482.13, sets specific, non-negotiable requirements for any restraint used to manage violent or self-destructive behavior that presents an immediate danger. A patient restrained for violent behavior must receive a face-to-face evaluation by a physician or other licensed independent practitioner within one hour of the intervention. Restraint orders are time-limited and must be renewed by a qualified practitioner rather than left standing indefinitely. The patient must be continuously monitored, and the least restrictive method that protects safety must always be used first. Every episode must be documented with the specific behavior that necessitated the restraint, the intervention used, and the ongoing monitoring performed.

The Joint Commission layers its own workplace-violence-prevention and leadership expectations on top of the federal rule: restraint episodes must be tracked, aggregated, and analyzed as part of the hospital’s broader violence-prevention program, and a pattern of frequent restraint use in a given unit should trigger a review of staffing, environment, and training rather than being treated as a series of unrelated events. For general counsel and risk management, this is the section of the record that a plaintiff’s attorney or a surveyor will scrutinize first, because a restraint episode with a missing one-hour evaluation, an expired order, or a gap in continuous monitoring converts a defensible clinical intervention into a documented regulatory failure.

How should EDs and behavioral-health units be designed and staffed to reduce Code Grey frequency?

The most elegant Code Grey is the one that never has to be called, and environmental design is where a large share of that prevention actually happens. Weapons screening at the emergency-department entrance keeps the population odds firmly on the side of Code Grey rather than Code Silver. Duress or panic alarms at every nurse station, triage desk, and behavioral-health workstation let a single staff member summon help silently, without provoking the very confrontation they are trying to avoid. Ligature-resistant fixtures, tamper-resistant hardware, and clear sightlines in behavioral-health holding rooms remove both self-harm risk and the blind corners where an assault can happen unseen. Low-stimulation “comfort rooms” away from the chaos of a busy ED give an agitated patient somewhere to de-escalate before a code is ever needed.

Staffing follows the same logic as design: coverage should be derived from when and where Code Grey activations actually cluster — typically nights, weekends, and behavioral-health units — rather than from an inherited patrol pattern that has never been checked against incident data. A generic retail-trained guard is not equipped for this environment. Officers assigned to emergency departments and behavioral-health units need healthcare-specific training in recognizing escalation, working alongside clinical staff rather than around them, and understanding that their job during a Code Grey is support and containment, not primary clinical management. Facilities that staff these posts with officers who know the unit, know the frequent patients, and have drilled with the clinical team consistently see faster resolution and fewer injuries than facilities that rotate unfamiliar contract guards through the same post every week.

What training do security officers and clinical staff need for Code Grey response?

Verbal de-escalation and safe physical intervention are learned skills, not instincts, and a credible program certifies both clinical and security staff in a recognized nonviolent crisis-intervention curriculum — the frameworks used across healthcare are built around the same core sequence of recognizing precipitating factors, applying verbal techniques, and, only as a last resort, using approved, least-restrictive physical holds designed specifically to minimize injury to the patient and the responder. Training has to be refreshed on a defined cycle, not delivered once at hire and forgotten, and it has to include the whole response chain: nurses and techs who make first contact, security officers who provide the physical presence, and physicians who authorize and evaluate restraint.

Joint training is what separates a program that looks complete on paper from one that performs under pressure. A security officer trained separately from the nursing staff, using different terminology and a different escalation ladder, will collide with the clinical team the first time a real Code Grey happens. Scheduled joint drills — walking the actual unit, using the facility’s real activation language, and debriefing honestly afterward — are what The Joint Commission’s surveyors look for as evidence that training records reflect a working capability rather than a compliance exercise.

How does Honeybadger support Code Grey programs for hospitals and health systems?

Honeybadger Solutions staffs Arizona hospital emergency departments and behavioral-health units with our own in-house, AZ-licensed security officers — not subcontracted, not generic retail guards — trained specifically in de-escalation, Code Grey support, and the healthcare-specific rules of engagement that separate a calming presence from an escalating one. Our security consulting practice designs and trains Behavioral Emergency Response Teams, workplace-violence risk assessments, and Code Grey protocols for hospitals and health systems nationwide, delivered remotely and on-site as the engagement requires, so a facility outside Arizona gets the same program-design rigor without us overstating what we staff directly.

When a restraint episode, an alleged use-of-force incident, or a pattern of Code Grey activations in one unit needs an independent, defensible review, our in-house investigations team reconstructs the incident from camera footage, access logs, and documentation — work we deliver nationwide because it does not depend on being physically present in the building. Where a Code Grey escalates into a targeted threat against a specific clinician or administrator, that protective response is executed through our commanded, vetted-partner network, with established armed and executive-protection theaters in California, Texas, and Florida and Arizona as home command; we do not claim owned armed personnel outside Arizona, and we will always tell a client plainly which capability is ours and which is delivered through a vetted partner. For Arizona facilities, our on-site presence is anchored across our Casa Grande headquarters and our Phoenix and Oro Valley security operations.

Frequently asked questions

What is the difference between Code Grey and Code Silver?

Code Grey signals a combative, agitated, or violent person with no weapon known or confirmed, and the response centers on de-escalation and containment by clinical and security staff. Code Silver signals an active threat involving a weapon or armed intruder, and the response shifts immediately to survival doctrine and law-enforcement notification. Any Code Grey where a weapon appears must convert to Code Silver protocol without delay.

Who is allowed to physically restrain a violent patient?

Only staff trained and certified in an approved nonviolent crisis-intervention technique should apply physical restraint, and it must be the least restrictive intervention necessary and, for restraint managing violent behavior, ordered by a physician or other licensed independent practitioner as required under CMS regulations. Security officers typically provide physical presence and support rather than initiating restraint independently of the clinical team.

How quickly must a physician evaluate a patient after restraint for violent behavior?

Under 42 CFR § 482.13, a patient restrained to manage violent or self-destructive behavior that poses an immediate danger must receive a face-to-face evaluation by a physician or other licensed independent practitioner within one hour of the intervention. Restraint orders are time-limited and require renewal, and the patient must be continuously monitored for the duration.

Does OSHA require hospitals to have a Code Grey program?

There is no single OSHA standard naming Code Grey specifically, but OSHA enforces workplace violence as a recognized hazard in healthcare under the General Duty Clause, and its healthcare guidelines expect worksite analysis, prevention controls, training, and recordkeeping. The Joint Commission separately requires an accredited hospital’s workplace-violence-prevention program to be documented, trained, and evaluated, which in practice makes a structured Code Grey protocol effectively required.