Behavioral Assessment

Behavioral threat assessment is the discipline of asking whether a person is moving toward harming someone else, using observable behavior rather than a hunch about their character. Schools, workplaces, and protective details use it because most targeted violence is preceded by behavior other people noticed and did not know what to do with. This lesson is the analyst's part of that work: what to record, how to weigh it, and when to hand it to the people who have the authority to act. It is not a clinical diagnosis. It is not a prediction machine. And it is not a description of how to hurt anyone. If you came for tactics, weapons, or target selection, this is the wrong page on purpose.

> The job is to notice a pathway while there is still an off-ramp. It is not to narrate the destination in useful detail.

Public guidance from protective-security services has made the core idea available for decades: targeted violence is rarely a bolt from a clear sky, and the useful material is behavior, context, and whether anyone has already tried to help. You do not need a secret method. You need a careful one.

What You Are Assessing

You are assessing a pattern of behavior against a concern that a specific person may pose a risk of targeted harm to an identifiable person, place, or event. You are not assessing whether they are strange, rude, politically unpleasant, or mentally ill. Those are not the question. Plenty of difficult people never move toward violence. A few people who seem ordinary do.

Hold three limits in the same hand.

• You are not a clinician unless you actually are one, in the room, with a duty of care. Do not write "paranoid," "unstable," or "psychotic" into an intelligence product because a post sounded heated. Describe what was said and done.
• You are not a sentencer. A single angry message is data. It is not a finding that someone will offend.
• You are not the intervention. Your product recommends a handoff. It does not authorize you to follow a person around, enter their accounts, or contact them under a pretext. If the concern is real, the next step belongs to a threat-management team, a manager, or law enforcement — whoever has the legal role. Name them.

Behavior, Not a Stereotype

Public threat-assessment practice keeps returning to the same distinction, and it is the one that keeps the work honest. Look at behavior that shows a path. Do not look for a type of person.

Concern worth documenting tends to cluster. You do not need all of it, and none of it is proof by itself.

• A grievance that has become the organizing fact of someone's weeks, especially a grievance against a named person or institution.
• Identification with other people who used violence for a similar grievance, talked about as a model rather than as a news story.
• Leakage: telling someone, in any medium, that they intend harm, or that a named person deserves it, in terms that go past ordinary venting. Context decides which is which. That is why you preserve the words instead of summarizing them into an adjective.
• Research or preparation that has a target and a direction, reported by someone in a position to know — a family member, a colleague, a teacher — not inferred by you from a mood.
• A sudden loss of the things that were restraining the person: a job, a relationship, housing, a treatment they had been using. Stressors are not motive. They are context for the behavior you already have.
• The last off-ramp failing. They asked for help, or someone offered it, and the situation moved anyway. Or nobody asked.

What does not belong on the list as if it were analysis: clothing, taste in music, a diagnosis you guessed, a community they belong to, a lawful protest they attended. If the behavior of concern is absent, those details are how analysts launder a bias into a "behavioral" finding. Leave them out or park them as context that you explicitly decline to score.

A Pathway Is a Hypothesis

Think of a pathway as a hypothesis you are trying to disconfirm: grievance, then fixation, then an idea of harm, then any concrete step, then an approach to a target. People get off the pathway. Many never get on it. Your job is to say where the evidence is, and where it is missing.

Write it as evidence against a step, not as a story you are impatient to finish.

• What we have. Quoted words, dated acts, named witnesses, records you are allowed to hold.
• What we do not have. No stated target. No time. No approach. No one who has seen preparation. Say the absences. An absence is not proof of safety. It is a limit on how far you may go in the product.
• What would move the judgment. A new leakage with a target, a witness to preparation, a breached protective order, a direct approach to the person they have named. Those are review triggers, not a menu.

Do not fill gaps with imagination. "They might be planning something" is not a step on the pathway. It is you being anxious in prose. Anxiety goes in your notebook. The product gets the evidence and the limit.

How to Write the Note

A behavioral assessment that a threat-management chair can use is short.

• The concern, in one sentence. Who reported it, about whom, regarding what potential harm. No colourful verbs you cannot source.
• The behavior, dated. What was said or done, in their words where you have them. Separate what a witness saw from what a witness concluded.
• The context that changes the weight. Prior similar behavior, an existing lawful order, a known target who has already been approached, a stressor that coincides with the behavior. Not a biography for its own sake.
• What you ruled out, and why. The angry email that, read in full, is a complaint about an invoice. Showing your work is how the next reader avoids re-inflating it.
• The judgment, capped. "Concern is elevated enough to refer" or "concern does not meet referral on what we hold, review if X." Avoid percentages. You do not have the base rate, and fake precision here is a professional foul.
• The handoff. Who should receive this today, and what you are not asking them to do. "Please assess for a workplace plan" is a handoff. "Please make this go away quietly" is not.

Keep the person's dignity in the writing even when the behavior is ugly. Slurs in your own voice, jokes, and clinical cosplay do not make the concern more credible. They make the file something a defence lawyer, a journalist, or a court will someday read back to you.

Referral Is the Mitigation

For this class of problem, the mitigation is almost always a referral plus a reduction in the target's exposure that the target's own security owner designs. You do not design a surveillance plan. You do not recommend that colleagues investigate someone's home, their family, or their private accounts. You do not publish the subject's name in a wide distribution because the story is interesting.

A clean recommendation sounds like this: "Refer today to the workplace threat-management chair and, if the words included a stated intent to harm a named person, to the police unit that takes those reports. Ask the chair to consider whether the named person needs a short safety plan. I am not assessing criminal guilt. I am flagging behavior that meets our referral threshold. Review trigger for me: any further direct contact, or any witness report of preparation."

Then stop. Wanting to be helpful by adding operational colour is how analysts end up writing the very harm they were supposed to interrupt. Do not.

Exercise

A facilities supervisor forwards you this, and nothing else:

"Night-shift cleaner J. M. has been short with staff since his hours were cut. Yesterday he told a nurse, 'People like her are why this place is finished,' after the nurse asked him to move a cart. The nurse is not sure he meant her. No threats. No history on file. She asked me to 'have him checked out because he seemed off.'"

Write the assessment note from the template above.

• Quote only what you were given. Do not invent preparation, weapons, or a plan.
• Say which pathway steps you do not have.
• Decide whether this meets a referral or a "record and review if" judgment, and say why.
• Name the handoff.
• Delete any sentence that diagnoses him, mocks him, or suggests someone follow him home.

The point of the exercise is the restraint. A thicker story would be easier, and it would be fiction.