NCIER®

Termination Handling

42 claims on pp. 18–87 (fact 5, statement 21, evidence 14, conclusion 1, conjecture 1).

Claims about Termination Handling

Fact [V] p018-08

Workplace grievances covered workload, reviews, discipline, termination, and conflicts

These grievances were related to workload, performance evaluations, disciplinary actions, termination decisions, and ongoing conflicts with supervisors or colleagues.

These grievances were related to workload, performance evaluations, disciplinary actions, termination decisions, and ongoing conflicts with supervisors or colleagues.

p. 18 · NCIER Claim Map
Report page 18 with the cited passage highlighted
Source page 18 · click to enlarge · all claims on this page
Evidence [V] p019-10

Cemetery ex-employee's revenge attack seven years after termination

A 64-year-old man who had been fired from a cemetery seven years earlier vowed revenge and threatened employees. He shot one person dead and injured two more at the cemetery before surrendering.

A 64-year-old man rode his bike to a cemetery where he used a handgun to shoot and kill one person

p. 19 · NCIER Claim Map
Report page 19 with the cited passage highlighted
Source page 19 · click to enlarge · all claims on this page
Fact [V] p019-16

Time from termination to attack ranged from immediate to seven years

The time between termination and attack varied, from one attacker who began his attack at the end of a termination meeting to another who targeted a site where he had been fired seven years earlier.

ranging from one attacker who immediately began his attack at the conclusion of a termination meeting, to another attacker who targeted a location where he had been terminated seven years earlier

p. 19 · NCIER Claim Map
Report page 19 with the cited passage highlighted
Source page 19 · click to enlarge · all claims on this page
Evidence [V] p019-22

Terminated cemetery worker complained about the cemetery for seven years before attacking

For seven years after his termination, the cemetery attacker complained to others about the cemetery and its employees before carrying out his attack.

For seven years following his termination, the attacker complained to others about the cemetery and its employees before perpetrating his attack.

p. 19 · NCIER Claim Map
Report page 19 with the cited passage highlighted
Source page 19 · click to enlarge · all claims on this page
Evidence [V] p019-26

Second resigning attacker had resigned in lieu of termination two years earlier after harassment

The second resigning attacker was a former employee who had resigned in lieu of termination two years earlier after sexually harassing and threatening colleagues.

The second attacker was a former employee who resigned in lieu of termination two years earlier after he had sexually harassed and threatened colleagues.

p. 19 · NCIER Claim Map
Report page 19 with the cited passage highlighted
Source page 19 · click to enlarge · all claims on this page
Fact [V] p020-03

Performance issues included mistakes, safety violations, tardiness, and absences

Performance issues included frequent or substantive work mistakes, safety violations, tardiness, and excessive or unexcused absences. Discipline ranged from complaints and reprimands to termination.

they included frequent or substantive work mistakes, safety violations, tardiness, and excessive or unexcused absences

p. 20 · NCIER Claim Map
Report page 20 with the cited passage highlighted
Source page 20 · click to enlarge · all claims on this page
Evidence [V] p020-06

Former resident physician's hospital shooting after forced resignation

A 45-year-old man opened fire at a hospital where he had been a resident physician, killing one and injuring six, then died after setting himself on fire and shooting himself. He had resigned two years earlier in lieu of being fired for sexual harassment and threats, and his badge was not revoked.

A 45-year-old man armed with a semiautomatic rifle opened fire at a hospital where he had formerly been employed as a resident physician

p. 20 · NCIER Claim Map
Report page 20 with the cited passage highlighted
Source page 20 · click to enlarge · all claims on this page
Evidence [V] p020-15

Confrontational ex-employee killed five former coworkers after firing

A 45-year-old gunman with a reputation for confrontation and fights at work, who had been fired two months earlier for stealing company equipment, opened fire at his former workplace and killed five former coworkers before dying by suicide. He had struggled financially and had asked to be rehired.

A 45-year-old gunman opened fire with a pistol at his former workplace, killing five of his former coworkers before dying by suicide.

p. 20 · NCIER Claim Map
Report page 20 with the cited passage highlighted
Source page 20 · click to enlarge · all claims on this page
Evidence [V] p020-22

Physician resigned in lieu of firing two years prior over harassment and threat allegations

Two years before the attack, he resigned from the hospital in lieu of being fired over allegations that he sexually harassed and threatened colleagues.

Two years prior, he had resigned from the hospital in lieu of being fired due to allegations of sexually harassing and threatening his colleagues.

p. 20 · NCIER Claim Map
Report page 20 with the cited passage highlighted
Source page 20 · click to enlarge · all claims on this page
Evidence [V] p020-26

Gunman emailed a manager asking for his old job back and was denied

At one point the gunman emailed a manager at the targeted site to request his old job back, and the request was denied.

At one point, the attacker emailed a manager at the targeted site to request his old job back, but his request was denied.

p. 20 · NCIER Claim Map
Report page 20 with the cited passage highlighted
Source page 20 · click to enlarge · all claims on this page
Evidence [V] p021-10

Employee attended a disciplinary meeting where he was told he would be fired

A 45-year-old employee entered an office for a disciplinary meeting at which he was informed he would be fired.

A 45-year-old employee entered an office to attend a disciplinary meeting where he was informed that he would be fired.

p. 21 · NCIER Claim Map
Report page 21 with the cited passage highlighted
Source page 21 · click to enlarge · all claims on this page
Evidence [V] p022-11

Harassment continued after his transfer; he stopped coming to work and was terminated

Although he had been transferred to a new department, the harassment continued, and he stopped showing up for work shifts and was terminated.

Although the attacker had been transferred to a new department, the harassment continued, and he stopped showing up for work shifts and was terminated.

p. 22 · NCIER Claim Map
Report page 22 with the cited passage highlighted
Source page 22 · click to enlarge · all claims on this page
Evidence [V] p034-10

Layoff nearly led to armed return after an unreported threat

During a round of mass layoffs, a violent incident was narrowly avoided when a laid-off employee with significant personal stressors threatened to return with a gun.

During a recent round of mass layoffs, a violent incident was narrowly avoided when an employee with significant personal stressors was laid off and threatened to return to the workplace with a gun.

p. 34 · NCIER Claim Map
Report page 34 with the cited passage highlighted
Source page 34 · click to enlarge · all claims on this page
Evidence [V] p034-13

Organization 1: some victims of the past spree were employees the attacker felt had wronged him

In the past incident the security professional described, some of those impacted were employees of the organization whom the terminated attacker felt had wronged him.

Some of those impacted were employees of the organization whom the attacker felt had wronged him.

p. 34 · NCIER Claim Map
Report page 34 with the cited passage highlighted
Source page 34 · click to enlarge · all claims on this page
Evidence [V] p034-17

Organization 2: laid-off employee who threatened a gun return was arrested for trespassing

The laid-off employee who had threatened to return to the workplace with a gun was ultimately arrested for trespassing on the premises.

The employee was ultimately arrested for trespassing on the premises.

p. 34 · NCIER Claim Map
Report page 34 with the cited passage highlighted
Source page 34 · click to enlarge · all claims on this page
Statement [V] p080-07

Notify relevant personnel in advance of an employee separation

The decision to terminate an employee must be clearly communicated in advance to relevant parties such as security, IT, HR, management, and legal so access can be revoked, work reassigned, and the organization can ensure it is following state and federal guidelines regarding termination.

The decision to terminate an employee must be clearly communicated to relevant parties within the organization (e.g., security, IT, HR, management, legal) in advance

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-09

A soft landing (severance, benefits, mental health) can reduce separation risk

Some organizations offer severance pay, a separation package, extended benefits or pensions, or mental health services, which can reduce work-related grievances or retaliation.

to reduce the risk of work-related grievances or retaliation.

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-10

Coordinate with community partners for services after separation

When appropriate and feasible, organizations should consider coordinating with community partners to offer services and support after separation.

When appropriate and feasible, consider coordinating with community partners to offer services and support for the employee following separation.

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-11

Create and follow offboarding protocols that restrict access and recover credentials

Offboarding protocols should restrict server, file, and facility access and ensure identification and credentials are returned.

These protocols should include ensuring that server, file, and facility access is restricted, and that identification and credentials are turned in when offboarding employees.

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [I] p080-12

Offer mail or scheduled pickup for returning materials when appropriate

It may be appropriate or necessary to offer some employees options to return materials via mail or scheduled pickup.

It may be appropriate or necessary to offer options for some employees to return materials via mail or scheduled pickup.

p. 80 · NCIER Claim Map

Why inferred Conditional recommendation hedged with 'may'; classified as a statement (guidance), not conjecture.

Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-15

Safe separation strategies apply to both terminations and voluntary resignations

Whether an employee is terminated or resigns voluntarily, organizations should consider the listed strategies to safely separate the employee.

Regardless of whether an employee is being terminated or has resigned voluntarily, organizations should consider the following strategies to safely separate an employee:

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-17

Explain the termination rationale in a way that preserves the employee's dignity

Organizations should explain the rationale for a termination decision in a way that allows the employee to maintain their dignity.

Explain the rationale for the termination decision in a way that allows the employee to maintain their dignity.

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [V] p080-18

Establish an offboarding checklist so no important separation actions are missed

Organizations should establish a list of necessary actions to take when separating employees so that no important actions are missed.

Establish a list of necessary actions to take when separating employees to ensure no important actions are missed.

p. 80 · NCIER Claim Map
Report page 80 with the cited passage highlighted
Source page 80 · click to enlarge · all claims on this page
Statement [I] p081-01

Additional safety precautions may be appropriate for separations

In some cases it may be appropriate to use added safety precautions, such as an offsite or video meeting or a security or law enforcement presence.

In some cases, it may be appropriate to utilize additional safety precautions.

p. 81 · NCIER Claim Map

Why inferred Conditional recommendation hedged with 'may be appropriate'; classified as a statement.

Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [I] p081-02

Coordinated outreach may be used to intervene with former employees

When deemed necessary, coordinated outreach through appropriate channels may be used to evaluate, assess, and intervene with former employees to reduce the risk of violence.

When deemed necessary, coordinated outreach through appropriate channels may be used to evaluate, assess, and intervene with former employees to reduce the risk of violence.

p. 81 · NCIER Claim Map

Why inferred Conditional recommendation hedged with 'may be used'; classified as a statement.

Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [V] p081-04

Post-separation strategies are not exhaustive or appropriate for every case

The post-separation strategies are not exhaustive and are not appropriate for all cases; BTAM teams should weigh them in the full context of the case.

These strategies are not exhaustive and not appropriate for all cases.

p. 81 · NCIER Claim Map
Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [V] p081-06

Reviewing separation circumstances can reveal climate and interpersonal issues

It can also be helpful to review the circumstances of the separation to assess organizational climate and potential interpersonal issues.

It can also be helpful to review the circumstances of the separation to assess organizational climate and potential interpersonal issues.

p. 81 · NCIER Claim Map
Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Conclusion [I] p081-07

Terminating an employee does not eliminate the risk they pose

Terminating an employee does not eliminate the risk the employee poses.

Terminating an employee does not eliminate the risk an employee poses.

p. 81 · NCIER Claim Map

Why inferred Summary judgement drawn from the separation guidance; classified as a conclusion.

Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [V] p081-08

Separations can exacerbate grievances and/or limit monitoring

Separations can create other problems, such as exacerbating existing grievances and/or limiting the organization's ability to monitor the employee's behavior.

Separations can create other problems, such as exacerbating existing grievances and/or limiting the organization's ability to monitor the employee's behavior.

p. 81 · NCIER Claim Map
Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [V] p081-09

Separation safety precautions: offsite or remote meetings, security or police presence

Additional safety precautions can include holding the separation meeting offsite or by phone or video, or having security or law enforcement present before, during, and after the termination.

These can include conducting a separation meeting at an offsite location or via a phone or video conference, or establishing a security or law enforcement presence before, during, and following the termination procedures.

p. 81 · NCIER Claim Map
Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [I] p081-11

High-risk former employees: stay-away orders and front-desk alerts to call security

For high-risk cases, other strategies might include working with law enforcement to issue a stay-away order and telling reception or front-desk staff to contact security or law enforcement if the individual is seen on premises after separation.

Other strategies, particularly for high-risk cases, might include coordinating with law enforcement to issue a “stay away” order from the premises and notifying reception, front desk, or other personnel to contact security or law enforcement if the individual of concern is observed on premises following the separation.

p. 81 · NCIER Claim Map

Why inferred Typed statement, not conjecture: the 'may'/'might'/'can' is permissive guidance (what a team may do), not speculation about what is the case.

Report page 81 with the cited passage highlighted
Source page 81 · click to enlarge · all claims on this page
Statement [V] p087-12

Discipline may be appropriate for bullying, including termination

Disciplinary action may be appropriate for bullying in some instances, including reprimanding the aggressor, placing them on administrative leave, and/or terminating them from employment.

Disciplinary action may be appropriate in some instances, including reprimanding the aggressor, placing them on administrative leave, and/or terminating them from employment.

p. 87 · NCIER Claim Map
Report page 87 with the cited passage highlighted
Source page 87 · click to enlarge · all claims on this page

Top

Find the Perfect Training Class For You