Series context. This series turns lessons from the September 10, 2025, Utah shooting into a practical playbook for campuses, event organizers, and public officials. Parts 1–4 covered threat assessment, drone exposure, and venue operations. This installment closes the loop with the governance, contracts, and insurance moves that decide outcomes before doors open. [1]
Put risk management into the contract, not a binder on a shelf
When events are public, outdoors, and high profile, operational discipline is only as strong as the paperwork that gives people authority, budgets, and stop-show power. Event agreements, vendor scopes, and permits should hard-wire incident command roles, training, pre-event exercises, and escalation thresholds that align with national guidance for mass gatherings and incident management. That means planning checklists and role definitions tied to CISA’s mass gathering framework, FEMA’s National Incident Management System, and the ASHER program practices reflected in NFPA 3000. [2][3][4] (CISA)
LCG perspective. You cannot transfer accountability; you can only transfer portions of financial exposure. Write the plan into the contract, name the person with authority, and make payment milestones depend on delivering and exercising the plan.































































