WorkflowK–12 Student Services, Families & Safety

Behavioral Threat Assessment & Management

Behavioral threat assessment and management where the team decides on cited facts, not the hallway version

Every referral screened within the hour, every level set by the team on cited facts.

See one case, screen by screen ↓
target1hourto screen every referral, with imminent danger phoned to the principal and police at once
demo7factorsfrom the district's model on the sample case, each with its finding and the records it came from
target100%of levels set after a bias and disability check, with the plan team consulted
demo6plan taskson the sample case, each with an owner and a date, tracked to an approved closure
In short

What is Behavioral Threat Assessment & Management?

Behavioral threat assessment and management (BTAM) is how a school threat assessment team decides how much concern a reported behavior warrants and what support or safety steps follow, then tracks the plan to closure. Behavioral Threat Assessment & Management guides each case from referral to safety plan and follow-up: agents screen, gather and cite the records, and check for bias, and the team sets the level.

AI in education: a buyer's guide to agentic AI for colleges, universities and school districts →

Updated

The problem

Why behavioral threat assessment and management runs on half the facts

Behavioral threat assessment and management asks a school team to decide, quickly and fairly, how much concern a worrying essay, remark or tip warrants and what support or safety steps follow. Virginia, Florida, Texas, New Jersey and Michigan now require school threat assessment teams. Yet the records the team needs sit in different places: discipline and attendance in the student information system, counselor notes in the counseling record, IEP and 504 status in the special education system, tips in the safety tip line. Team members phone each other for them, and rumor fills the gap.

The risks sit at both ends. The dangerous case is rare and cannot wait in an inbox for a meeting. The ordinary case, a story with a dark line written by a student with an anxiety plan, can be over-assessed when nobody checks the referral's words against the student's disability profile. Then the plan agreed in the room lives in someone's notebook, follow-ups slip, and closure goes undocumented.

typical41%of 15,301 school threat assessments in one statewide study concerned students with disabilities
typical3.9×students in special education more likely to be referred for a threat assessment
typical41attackson schools studied; every attacker had shown concerning behavior beforehand
Where one referral's hours go, before the team can close itestimated
By hand16 hours
With the solution5.3 hours
  • Logging the referral and screening it for imminent danger2 → 0.3 h
  • Phoning for discipline, attendance, counseling and 504 records4 → 0.5 h
  • Sorting verified facts from rumor and running interviews3 → 2 h
  • Checking for disability or cultural bias, consulting the 504 team2 → 0.5 h
  • The team meeting and documenting who agreed2 → 1 h
  • Writing the safety and support plan and the parent notice3 → 1 h

Estimated hours of staff time for one referral that goes to a team review, by hand and with the solution. Interviews and the team meeting stay with people.

How it works

How a referral moves

Eight agents screen, gather, check and draft; the team sets the level and a second member confirms.

What comes in
Referrals in4 channels · staff form, tip line, email, records
Agents at work
Intake agentwithin the hour
Then
Records agentcited, facts vs rumor
Bias Check agentdisability, culture
Then
Assessment drafterdraft placement
Plan agentsupports, owners
Then
Follow-up and Notice agentson schedule, home language
A person decides
Threat assessment teamsets the level; a second member confirms
What comes out
Level on the continuum
Safety and support plan
Notice in Spanish
One case, step by step

One behavioral threat assessment and management case, from referral to plan

Tuesday, October 20, at Marlow Bay Unified School District, about 48,000 students in 62 schools. One tip names a gun before school; one essay is referred after lunch. Here is what happens next, screen by screen, in the working solution.

  1. 017:12 a.m.

    A tip names a gun, and the agent phones at once

    Intake agent

    A safety tip line message says an 8th grader at Juniper Hill Middle School will bring his father's gun “tomorrow”. Case BT-0109 meets the imminent-danger screen in 1 minute. The Intake agent phones principal Martin Echols (answered 7:14 a.m.) and police dispatch (answered 7:15 a.m.) with a read-out script and texts the team lead, and the FERPA health-or-safety emergency disclosure is recorded at 7:16 a.m.

    The Intake agent keeps calling down the list until a person answers. It never waits for a meeting on imminent danger.

  2. 021:40 p.m.

    An essay about getting even is referred

    Hannah Brightwater · English teacher

    Elias, a 9th grader at Linden Shore High School, ends his “turning point” short story with “He'd get even with all of them, one way or another.” His English teacher refers it. The Intake agent screens case BT-0112 in 12 minutes: no target, time, place or weapon named. It goes to the Linden Shore team, with the reasons shown step by step.

    The referrer gets an acknowledgment, never the outcome.

  3. 031:58 p.m.

    Records gathered on a need-to-know basis, rumor held apart

    Records agent

    The Records agent gathers what the team may see, each item cited: two counselor notes about bullying in September and October, a Section 504 plan for anxiety, attendance at 94.1% with 3 tardies, and one tardy referral. The special education system times out and is retried at 2:03 p.m. An anonymous tip, “I heard Elias has a list,” is filed as a report not verified. At 2:40 p.m. school psychologist Nadia Ferreira-Lund's interview with a classmate shows the list is the story's character list.

    A report not verified never sets a level: it is resolved with evidence or set aside with a reason.

  4. 042:05 p.m.

    The case on the concern continuum

    Keisha Montgomery-Hale · Assistant principal

    Keisha sets an interim placement of moderate concern while the team gathers. The case screen puts BT-0112 on one line from low to imminent. Below it sit seven factors from the district's model: communication of intent, access to weapons, grievance, stressors, planning or preparation, protective factors and prior discipline, each with its finding and the records it came from. The Assessment drafter drafts low concern at 0.86 confidence.

    Below confidence 0.75 the Assessment drafter drafts no placement. The team sets the level.

  5. 05Before any level

    A bias and disability check, with the 504 team consulted

    Bias Check agent

    The Bias Check agent notes that the words sit inside an assigned work of fiction, and that “won't make eye contact” and “keeps to himself” in the referral match Elias's 504 plan for anxiety rather than any threat factor. The district model requires the plan team's input, and 504 coordinator Derek Oyelaran adds his at 3:18 p.m. Of 6 similar fiction-writing referrals, 5 were placed at low concern.

    The Bias Check agent never sets or lowers a level, and never hides a warning.

  6. 063:30–3:52 p.m.

    The team decides, and a second member confirms

    Dr. Raymond Iwasaki-Hart · District threat assessment team lead

    A 3:05 p.m. call with Elias's mother, Lucía Navarro, in Spanish with a district interpreter, confirms there are no firearms in the home. The team reviews the draft, the verified facts and the bias check, and places the case at low concern, 4 of 4 agreeing. Dr. Iwasaki-Hart proposes; Nadia Ferreira-Lund confirms as the second member. The member who proposes cannot confirm.

    Reason code: “Fiction assignment; no plan, means or target; grievance being addressed.”

  7. 07Adopted with the level

    A safety and support plan with owners and dates

    Plan agent

    Six tasks from the district's supports menu: counselor check-ins twice a week (Tomás Ribeiro), a bullying investigation open by Oct 22 and a PE locker room schedule change by Oct 21 (Keisha Montgomery-Hale), a 504 plan review by Oct 27 (Derek Oyelaran), a parent meeting by Oct 23 and a note to the English teacher (Nadia Ferreira-Lund). The follow-up review is Friday, October 30, day 10.

    The Plan agent never assigns a punitive measure and never schedules without the owner.

  8. 084:20 p.m.

    The parent notice, in Spanish beside the English

    Notice agent

    The notice to Mrs. Navarro says low concern, a fiction assignment, no disciplinary action, the supports for the bullying, a meeting with an interpreter by October 23 and the review on October 30. The Notice agent drafts it; Nadia Ferreira-Lund reviews it; Dr. Iwasaki-Hart signs. It goes by email and mailed letter, and names no other student.

  9. 09One switch

    Only what the law allows the officer to see

    Officer Marcus Delgado-Byrne · School resource officer

    Switched to the school resource officer's view, the same case shows the referral, the essay, the officer check and weapons access. The grievance and stressor findings that rest on counseling notes and the 504 plan are withheld. Every view is written to the audit trail.

    “Withheld for the school resource officer: counseling and disability records (need-to-know).”

Who it’s for

Built for everyone on the threat assessment team.

The same case, seen by five people who carry it: what their week looked like, and what it looks like now.

RI
Dr. Raymond Iwasaki-HartDistrict threat assessment team lead · 62 schools
District threat assessment team lead
Before
Chairs team reviews across 62 schools and approves every level change and closure, often with the hallway version in front of the team.
Now
Opens each case with every factor cited and rumor held apart, sees who agreed, and approves closure only when the plan is done.
NF
Nadia Ferreira-LundSchool psychologist and case manager · Linden Shore High School
School psychologist
Before
Spends half her time chasing records by phone before the team can even meet.
Now
Finds the records gathered and cited, resolves the tip line report with her interview, and reviews each notice and check-in note before it goes out.
KM
Keisha Montgomery-HaleAssistant principal · Linden Shore High School
Assistant principal
Before
Takes the first call on every referral at her school, and when it's urgent she can't wait for a meeting.
Now
Sees each referral screened within the hour with its reasons, sets the interim placement, and owns her plan tasks with dates.
OM
Officer Marcus Delgado-ByrneSchool resource officer · Linden Shore High School
School resource officer
Before
Checks weapons access and works with the police department, and has to be told case by case what he may see.
Now
Sees the referral, the essay, the officer check and weapons access; counseling and 504 details stay withheld unless an emergency disclosure is documented.
JP
Joanne PakBTAM program administrator · Student Services
BTAM program administrator
Before
Owns the district model, roles and settings, and builds the state report from case files by hand.
Now
Reviews a quarterly state report drafted from the cases, each count linked, with the fairness watch beside it, for the Assistant Superintendent to approve.
Built on the engine

8 agents. Each with one job, and hard limits.

Eight agents screen, gather, check and draft; the team sets the level and a second member confirms.

Intake agent

Screens every referral within the hour against the district's imminent-danger screen, and on any sign phones the principal and law enforcement at once with a read-out script.

  • Never sets a level
  • Never waits for a meeting on imminent danger
  • Never tells the referrer the outcome
Records agent

Gathers the prior discipline, attendance, counseling notes, IEP or 504 status and documents each role may see, cites each one, and files every statement as a verified fact or a report not verified.

  • Never reads beyond need-to-know
  • Never treats a report not verified as fact
  • Never searches social media
Bias Check agent

Warns when the referral's language or factors reflect disability, culture or language rather than threat, requires the plan team's input, and shows how similar cases were placed.

  • Never sets or lowers a level
  • Never hides a warning
Assessment drafter

Drafts the factor findings and a placement on the concern continuum from the district model, with its rationale and confidence.

  • Only drafts; the team sets the level
  • Below confidence 0.75 it drafts no placement
Plan agent

Drafts the safety and support plan from the district's menu of supports, with owners and dates.

  • Never assigns a punitive measure
  • Never schedules without the owner
Follow-up agent

Keeps the plan on schedule, drafts check-in notes for review, sends reminders and escalates missed tasks.

  • Never closes a case
  • Never edits a decision
Notice agent

Drafts parent notices in the family's home language, with the original beside the English.

  • Never sends without a person's sign-off
  • Never names other students
Reporting agent

Drafts the state threat assessment report from the cases and assembles the audit export pack.

  • Never submits without the approver
Threat assessment team

Sets the level, approves closure. The agents propose; a named person decides.

Ask in plain words

Ask about any case, in plain words

Ask about any referral, case, plan or report, or say what to do next. Every answer cites the records it came from, and shows only what your role may see.

Why is the draft low concern?

The draft weighs the words inside a fiction assignment, no weapons access, no plan or preparation in any verified record, and strong protective factors. The grievance is real: bullying in September and October, and the plan addresses it. The team sets the level; this is only a draft (confidence 0.86).

What does the 504 plan say about his behavior?

When anxious, Elias may avoid eye contact and withdraw from peers. The referral's words “won't make eye contact” and “keeps to himself” match that profile, so the Bias Check agent does not count them as a threat factor. The 504 team agrees.

What may the school resource officer see on this case?

The referral, the essay, the officer check and the weapons-access finding. Counseling notes, the 504 plan and the 504 team input are withheld, unless a health-or-safety emergency disclosure is documented under 34 CFR 99.36.

Which follow-ups are due this week?

Seven: BT-0093's counselor check-in is overdue by 1 day and escalated to you; BT-0110 and BT-0111 have team reviews on Wednesday, and four more fall on Thursday and Friday. Two closures also wait for your approval.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

One case on the concern continuumThe case on a line from low to imminent, with the interim placement and who set it, seven factors cited to their records, the agents' draft and the safety and support plan beside it.
The team's brief, citedWhat changed since yesterday, the one decision waiting on the team, the 31 open cases on the concern continuum and the clocks.
Imminent danger phoned at onceThe screening trace, the call log with answered times, and the FERPA health-or-safety emergency disclosure record.
Every referral screened within the hourToday's referrals from the staff form, the safety tip line and email, each screened with its reasons shown step by step.
Records on a need-to-know basisRecords by system with the access basis and citations, verified facts apart from a report not verified, and a source retried after a timeout.
Bias and disability checkNotes that cite the referral and the 504 plan, the plan team's input, and how similar referrals were placed.
The team decides, a second member confirmsA guided decision: the agents' draft, the placement and reason code, each member's agreement and the second member's confirmation.
Safety and support planSupports first, each task with an owner and a date, the follow-up review on day 10 and a drafted check-in note for the counselor.
Parent notice in the home languageThe notice in Spanish beside the English, drafted by an agent, reviewed by the case manager and signed by the team lead.
What the school resource officer may seeThe same case in the officer's view: the referral, the essay and weapons access shown; findings resting on counseling notes and the 504 plan withheld.
Follow-ups and closuresFollow-ups due this week with their clocks, an overdue check-in escalated to the team lead, and closures waiting for approval, one blocked by an open task.
The audit trailEvery step by people and agents, with who, what, when, why and the evidence, the FERPA disclosure log and the export pack.
The state threat assessment reportThe quarterly report drafted from the cases, each count linked, with the fairness watch: students with disabilities at 22% of referrals against 14% of enrollment.
Governance

Built for fairness and privacy: cited, confirmed, on the record.

The team sets every levelThe agents draft; the team places the case on the concern continuum, each member's agreement or dissent is recorded, and a second member confirms every level change. The member who proposes cannot confirm.
Every statement cites its recordEach finding links to the referral, counselor note, 504 plan, interview or officer check it came from. A report not verified never feeds a level until it is resolved with evidence or set aside with a reason.
A bias and disability check firstBefore any level, the referral's words are compared with the student's IEP or 504 profile and with similar cases, and the plan team is consulted when the student has a plan, as the district model requires.
Need-to-know views by roleCounseling, health, IEP and 504 details are withheld from the school resource officer, names are shortened in lists, and tip senders stay sealed. Retention and redaction on export are settings.
Emergency disclosures recorded as they happenA FERPA health-or-safety emergency disclosure is recorded with the threat, the recipients, the items and the time, and confirmed by a second person.
Every step on the audit trailWho, what, when, why and the evidence, for people and agents, with agent and model versions. The export pack serves the state, a civil rights complaint or a court, with other students' names redacted.
Configuration

Your district's model and clocks, not ours

The clocks, the plan team consult and the privacy rules are settings. Each change is saved as a new version, and a new district model needs the Assistant Superintendent's approval.

SettingDefaultChoose from
Screen a referralWithin 1 hourWithin 30 minutes · Within 1 hour · Within 2 hours
Imminent danger phoned to the principal and law enforcementWithin 5 minutesWithin 2 minutes · Within 5 minutes
Team review, moderate concern and aboveWithin 1 school daySame day · Within 1 school day · Within 2 school days
Full assessment, high concernWithin 5 school daysWithin 3 school days · Within 5 school days
Default follow-up reviewDay 10Day 5 · Day 10 · Day 20 · Day 30
Plan team consultRequired before a level when the student has an IEP or a Section 504 planOn · Off
Retention5 years after closure or age 23, whichever is later5 years after closure or age 23, whichever is later · 7 years after closure
Agents never set a levelThey draft; the team decides and a second member confirmsLocked
Connections

Works with the systems a school threat assessment team already uses

Student information systemdiscipline, attendance, enrollment and home language
Counseling recordscounselor notes, on demand, for the team only
Special education case management systemIEP and 504 status and plans
Safety tip linetips in real time, with the sender sealed
Document managementessays, referral forms and signed notices
Phone and text gatewayimminent-danger calls with a read-out script
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
1hour
to screen every referral; imminent danger phoned in under 5 minutes
Next team meeting1–3 days
With agents≤ 1 hour
target
100%
of levels set after a bias and disability check, plan team consulted
Every case
41% involve students with disabilities (typical)
target
Every
plan task with an owner and a date, tracked to an approved closure

“demo” = seen in the working solution, on its sample district data · “target” = the design goal, measured in the live solution · “estimated” = our estimate of staff hours for one referral that goes to a team review · “typical” = published figures (a National Institute of Justice–funded statewide study of 15,301 threat assessments in 1,221 schools; an analysis of statewide school safety audit data summarized by New America; U.S. Secret Service National Threat Assessment Center, Protecting America's Schools, 2019). State laws requiring school threat assessment teams in Virginia, Florida, Texas, New Jersey and Michigan, and FERPA (34 CFR §99.36 and §99.32), IDEA and Section 504 are named as context. Marlow Bay Unified School District, its schools, and the people and cases named on this page are fictional: characters and sample data in the working solution.

Questions

What school threat assessment teams ask us.

What is behavioral threat assessment and management?

Behavioral threat assessment and management (BTAM) is how a school threat assessment team decides how much concern a reported behavior warrants and what support or safety steps follow, then tracks the plan to closure. Behavioral Threat Assessment & Management guides each case from referral to safety plan and follow-up: agents screen, gather and cite the records, and check for bias, and the team sets the level.

How does it screen referrals for imminent danger?

The Intake agent screens every referral within the hour against the district's imminent-danger screen: a weapon named or seen, a time or place named, a target named, or preparation seen. On any sign it phones the principal and law enforcement with a read-out script, keeps calling down the list until a person answers, and records the emergency disclosure.

How does it keep rumor out of the decision?

The Records agent files every statement as a verified fact or a report not verified, each cited to its record. A report not verified, such as an anonymous tip, never feeds a level: a team member resolves it with evidence, like an interview, or sets it aside with a reason.

Does it help keep students with disabilities from being over-assessed?

Before any level is set, the Bias Check agent compares the referral's words with the student's IEP or 504 profile and with similar cases, and the plan team is consulted. The state report's fairness watch compares referral shares by disability, race and language with enrollment. The agent warns; the team decides.

What can the school resource officer see?

Only what the law allows. The officer's view shows the referral, the essay, the officer check and weapons access, and withholds counseling, health, IEP and 504 details unless a health-or-safety emergency disclosure under FERPA is documented. Every view is on the audit trail.

Do people stay in control of the level and the plan?

Yes. The agents only draft. The team places the case on the continuum, a second member confirms every level change, a change to an agent's finding needs a reason code, the team lead approves closure, and a person signs every parent notice.

Can it draft the state threat assessment report?

Yes. The Reporting agent drafts the report from the cases, with each count linked to its cases. The program administrator prepares it and the Assistant Superintendent approves it before it goes to the state reporting portal.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents, such as your district's threat assessment model, supports menu, notice templates and records schedule, and it goes live once every quality gate has passed. We will walk you through it on your own model first.

See it on
your referrals.

We'll run Behavioral Threat Assessment & Management on your district's model, supports menu and de-identified past cases.