The oncologist’s honesty — the protocol is the best chance, not a guarantee
We will not tell you a system would have prevented this, and you should distrust anyone who does — you have just lived through proof that a device at the door is not a guarantee. What we will tell you is what the failure class actually is, and what is designed for it. A single screening point treated as the whole answer is a design assumption, not a security program; the Mayo Clinic’s 2026 review found that only about a third of hospital shootings were potentially preventable by weapons screening — which means roughly two-thirds were not, and depended instead on interior response, containment, and the record of what happened. Screening earns its place for the third it addresses; it is oversold when it is offered as the answer to the rest.
So the question the day-after actually turns on is not “why didn’t the door stop it” — it is “what did our systems see, what did they do, and can we produce it.” In the New Hampshire case the video timeline effectively became the investigation: the seventeen seconds are legible because they were captured, time-stamped, and retrievable. That is the capability we design for — detection, location-aware alerting, coordinated response, and a time-synchronized record — presented as what it is: the best structured chance for the class of event, and the evidence that survives the reckoning after it. We point at the design assumption that failed, never at the officer or the staff who lived it.
What “one coordinated system” means at the level of the links, because each failure this room is about is a break at exactly one of them: duress has to route to a location, or the alert fires and no one knows where — the most investigator-documented break; the camera has to be tied to the alert, or the video exists but isn’t linked to what happened and reconstruction is manual; lockdown has to fire on the triggering access event, or the systems don’t act as one under real conditions; and the record has to be retrievable as one time-synchronized account, or it exists in pieces and the investigation asks for it whole. Closing each break is integration work, not another device.
There is one class where the physical answer measurably changed the base rate: infant abduction, where RFID tagging, access control, and drilled protocol drove abductions down sharply as adoption spread. We say that plainly because it is true — and because a firm willing to name the one place the protocol demonstrably worked is the firm you can trust when it says screening only reaches a third. The accreditation frame sits downstream of all of this: the Joint Commission’s workplace-violence performance goal now routes incident data to your governing body, so the record we build is also what makes that reporting evidenced rather than anecdotal.
“The families and the regulators never asked us whether the door held. They asked what we saw, what we did, and whether we could show it. That is the whole job.”
Sources: Mayo Clinic 2026 review (hospital shootings potentially preventable by weapons screening — approximately one third, “potentially” retained verbatim); BLS Survey of Occupational Injuries and Illnesses (healthcare workplace-violence rate multiplier); publicly reported November 2023 New Hampshire hospital lobby shooting and the on-record statements of officials and an independent expert; CMS Form 2567 immediate-jeopardy findings as public records; Joint Commission workplace-violence National Performance Goal routing incident reporting to the governing body. Specific state effective dates and the federal OSHA rulemaking status are deliberately not asserted here pending primary-source verification at launch.
What would change this: Federal OSHA WPV rulemaking status; state workplace-violence statute effective dates (NY, CA); Joint Commission NPG element language under Accreditation 360; any Mayo/BLS figure update.
Reviewed July 2026 by the Eagle Systems healthcare practice. The systems referenced are how a facility meets the accountability the regulation creates, not a mandate; the accreditation and compliance determinations belong to the organization and its regulators. Current as of Accreditation 360 (eff. Jan 1 2026).