Threat Assessment

Behavioral Emergency Response Teams in Healthcare

A behavioral emergency response team (BERT) is the rapid-response arm of threat management. Learn how to stand one up, document activations, and tie it to your WVP program.

VIGILO Compliance Editorial Team8 min

A behavioral emergency response team — often called a BERT — is the rapid-response arm of a workplace violence program: a trained, multidisciplinary group that arrives on the unit when a patient, visitor, or situation turns acutely agitated and brings de-escalation and clinical expertise to bear in real time. It sits opposite the threat assessment team on the program's two-sided structure — the threat assessment team manages concerns deliberately over time, while the behavioral response team handles the moment that is unfolding now. A mature program needs both, and a clean handoff between them.

This article explains what a behavioral response team does, how it differs from both the threat assessment team and a security response, and how to document activations so they become survey evidence rather than gaps.

#Where a BERT fits in the program

Most facilities can describe their de-escalation training and their threat assessment process but stall on what happens in the gap between them: the acute behavioral emergency that is past talking-down by a single nurse but not yet a security or law-enforcement event. That gap is where a behavioral response team lives. Mapping it against the program's other functions clarifies the role:

FunctionTime horizonWhat it handles
Individual de-escalationSeconds to minutesOne staff member managing rising agitation
Behavioral emergency response team (BERT)The acute event, nowA coordinated team responding to active agitation on the unit
Emergency / law-enforcement responseImminent dangerAssault, weapon, or threat beyond clinical management
Threat assessment teamDays to weeksProspective concerns managed as cases

The distinctions matter because they map to different response modes. A behavioral response team is a clinical and de-escalation resource that can de-intensify a situation before it reaches the emergency line — and, done well, can reduce reliance on physical interventions and restraint, supporting the acute-agitation protocols that protect both staff and patients.

#The rails: care and de-escalation, never a guard force

A behavioral response team must be chartered as a clinical and de-escalation function, not a security operation. Its members lead with verbal intervention, clinical assessment, and coordination — not force. Safety or security personnel may support a response, but the team's identity and purpose are caregiving. This is not a semantic nicety: a behavioral response team framed and documented as a guard or restraint squad invites both clinical harm and an unfavorable record. Framed as care, it reads correctly to surveyors, to staff, and to anyone reviewing an activation later.

#Membership and activation

A behavioral response team is multidisciplinary, with composition matched to what the acute moment needs:

  • Behavioral health / psychiatric nursing — clinical assessment and verbal de-escalation lead.
  • Charge or unit nurse — patient history, care-team coordination, and unit context.
  • A trained responder pool — staff drilled in de-escalation who can respond across units.
  • Safety / security support — present for coordination and access, not as the lead.
  • Provider availability — for orders where a clinical intervention becomes necessary.

Activation should be as frictionless as a medical rapid-response call. Any staff member can summon the team through a defined channel — a behavioral code, a paging string, an app trigger — and the team convenes at the bedside within a target response time. The activation criteria and target time belong in the written protocol so the response is consistent rather than dependent on who is working.

#The handoff to the threat assessment team

The behavioral response team resolves the acute event; it does not own the longer arc. When an activation reveals a prospective concern — a patient who has now threatened a specific clinician, a pattern emerging across encounters — the protocol should route that concern to the threat assessment team for deliberate case management. The handoff is a defined step, not an assumption: the response team documents what occurred, flags whether ongoing assessment is warranted, and the concern enters the five-step threat assessment process. Without that bridge, acute events resolve in isolation and the program never learns from them.

#Documenting activations as survey evidence

Every activation is data. The Joint Commission's workplace violence requirements (effective Jan. 1, 2022 for hospitals) expect facilities to report, track, trend, and follow up on incidents; under Texas HSC Chapter 331, the plan must include a reporting mechanism and post-incident response. A behavioral response team activation log — what triggered it, who responded, what interventions were used, the outcome, and whether a threat assessment referral followed — feeds directly into that trending. A surveyor tracing a behavioral event will look for exactly this record. Activation data also sharpens the worksite analysis: a cluster of activations on one unit or one shift is a hazard signal the WVP committee should act on.

#Drilling the response

A behavioral response team that has never practiced will fragment under real stress. Build periodic drills and tabletop scenarios into the program so roles, communication, and the handoff are rehearsed — and so the training itself becomes documented evidence of a functioning capability. Drilling also surfaces the friction points (slow activation, unclear lead, no documentation step) while the stakes are low.

#How VIGILO helps

VIGILO helps facilities design and document a behavioral emergency response capability as part of a complete threat assessment and response program — activation criteria, multidisciplinary membership by role, the handoff to the threat assessment team, and an activation log that feeds trending — built into the written WVP plan and trained through de-escalation education. The capability is kept current through an annual program review, and for Texas facilities it aligns with HSC Chapter 331. To see where your acute-response structure stands, start with the Chapter 331 compliance checklist.


VIGILO provides compliance, training, and consulting assistance and supports survey-readiness and preparedness; it does not guarantee safety outcomes and does not provide security guard, patrol, or investigative services. A behavioral emergency response team is a clinical and de-escalation function, not a security or restraint operation; restraint and seclusion are governed by separate clinical and regulatory standards. Sources: The Joint Commission Workplace Violence Prevention requirements (incident reporting, tracking, trending, and follow-up; effective Jan. 1, 2022 for hospitals); Texas Health & Safety Code Chapter 331 (SB 240, 88th Leg., 2023) and 26 TAC §133.55; OSHA Publication 3148.

From this article

Frequently asked questions

What is a behavioral emergency response team (BERT)?

A behavioral emergency response team is a trained, multidisciplinary group that responds rapidly when a patient, visitor, or situation becomes acutely agitated or threatening — bringing de-escalation and clinical expertise to the unit in real time. It is the rapid-response arm of a workplace violence program, distinct from the threat assessment team that manages concerns over time.

How is a BERT different from the threat assessment team?

The behavioral emergency response team handles the acute moment — the active agitation on the unit now. The threat assessment team manages prospective concerns deliberately over days or weeks. One is rapid response; the other is case management. A complete program needs both, with a clear handoff between them.

Does a BERT replace a security or code-gray response?

No. A behavioral response team is a clinical and de-escalation resource, not a guard force. It can reduce reliance on physical interventions, but it works alongside the facility's emergency activation and law-enforcement pathway, not as a substitute for them. It is framed as care and de-escalation, never as security operations.

Turn this guidance into a survey-ready program

VIGILO builds, documents, and maintains the workplace violence prevention program of record — committee, written plan, training, and binder — aligned to Chapter 331, the Joint Commission, and OSHA.

CallRequest an Audit