Level 1 vs Level 2 BTA: What District, Regional, and Statewide Teams Need to Coordinate

Prevention by Intervention™: Understanding Level 1 and Level 2 Behavioral Threat Assessment

School safety begins long before a crisis occurs.

Every student arrives at school with a unique set of experiences, strengths, and challenges. While most students will never present a serious safety concern, educators know that concerning behaviors sometimes emerge long before a crisis develops. The challenge is recognizing those behaviors early and responding with the appropriate support before they escalate.

That shift from reacting to incidents to identifying risks earlier has transformed how districts approach school safety.

Today, Behavioral Threat Assessment (BTA) is becoming a foundational component of comprehensive school safety strategies. Rather than relying solely on discipline or waiting until a student's behavior reaches a crisis point, BTA provides schools with a structured, multidisciplinary process for evaluating concerns, assessing risk, and connecting students with appropriate interventions.

This approach reflects a broader philosophy that many districts now embrace: Prevention by Intervention™. The objective is not simply to identify potential threats, but to understand the factors driving concerning behavior and provide support before harm occurs.

The need for this approach continues to grow.

According to a 2024 study by the Pew Research Center, 58 percent of teachers report managing student behavioral issues every day. That figure increases to 67 percent in high-poverty schools. The study also found that 28 percent of educators provide daily support for students experiencing mental health challenges, while 40 percent reported experiencing physical violence from a student and 68 percent said they had been subjected to verbal abuse.

These findings reinforce what many educators already know. Student behavior has become increasingly complex, and traditional disciplinary approaches alone are no longer enough to address today's challenges.

Behavioral Threat Assessment provides an alternative.

By bringing together educators, counselors, school administrators, mental health professionals, school resource officers, and community partners, districts can evaluate concerning behaviors objectively, determine the level of risk, and develop intervention strategies that prioritize both student well-being and school safety.

The goal is not to predict violence or label students. It is to understand risk, intervene appropriately, and provide the support necessary to reduce the likelihood of a situation escalating.

Moving Beyond Reactive Discipline

For decades, schools have largely relied on disciplinary processes to respond to behavioral concerns. Suspensions, expulsions, and other corrective actions remain important tools in certain circumstances, but they often occur after concerning behaviors have already intensified.

Behavioral Threat Assessment represents a different way of thinking.

Instead of asking, "What rule was broken?", BTA asks "What is driving this behavior, and what support or intervention is needed?"

This distinction is significant.

Research from the U.S. Secret Service National Threat Assessment Center has consistently shown that individuals who commit acts of targeted violence often exhibit observable behaviors or communicate their intentions before an attack occurs. Those warning signs are frequently noticed by classmates, educators, family members, or members of the community, creating opportunities for early intervention when appropriate reporting and assessment processes are in place.

A 2021 National Threat Assessment Center study examining 67 averted school violence plots found that 94 percent of attackers had shared their plans or intentions with another person before the planned attack. The study also found that in approximately 66 percent of completed school attacks, at least one concerning behavior had been observed but was never reported.

These findings highlight why early reporting, multidisciplinary collaboration, and consistent follow-through are essential components of an effective Behavioral Threat Assessment program.

Successful BTA programs are built on four core principles:

• Identification: Recognizing concerning behaviors or situations that may require further evaluation.
• Inquiry: Gathering relevant information from multiple sources to better understand the context.
• Assessment: Determining the level of concern based on evidence rather than assumptions.
• Management: Implementing interventions, monitoring progress, and connecting students with appropriate support services.

Together, these principles help schools move beyond passive observation toward structured, evidence-based intervention.

That is the foundation of Prevention by Intervention™.

The next question for district leaders is not whether Behavioral Threat Assessment should be part of their school safety strategy.

It is how that strategy should be implemented.

Understanding the difference between Level 1 and Level 2 Behavioral Threat Assessment is the first step toward building a coordinated, scalable process that supports students while strengthening safety across the entire district.

Understanding Level 1 and Level 2 Behavioral Threat Assessment

Behavioral Threat Assessment is not a single event. It is a structured process that adapts to the level of concern presented by each situation.

While every district may follow a different evidence-based framework, such as CSTAG, the Salem-Keizer Cascade Model, or guidance from the U.S. Secret Service National Threat Assessment Center (NTAC), most programs share a common objective: identify concerns early, assess risk objectively, and match the response to the student's needs.

That is where Level 1 and Level 2 Behavioral Threat Assessment play distinct but complementary roles.

Rather than representing separate programs, they function as connected stages within the same intervention process. Most situations are appropriately addressed at the school level. More complex or higher-risk cases are escalated to broader multidisciplinary teams with additional expertise and resources.

The goal is always the same: provide the right level of intervention at the right time.

Level 1: Early Intervention at the School Site

Level 1 Behavioral Threat Assessment is where nearly every case begins.

Conducted by a multidisciplinary team within the school, Level 1 focuses on identifying concerning behaviors, gathering information, assessing immediate risk, and determining the most appropriate course of action.

A typical school-based team may include:

• School administrators
• Counselors or psychologists
• Teachers
• School Resource Officers (SROs), when appropriate
• Other staff familiar with the student

Rather than relying on assumptions or isolated observations, the team reviews multiple sources of information to understand the broader context surrounding the behavior.

This may include:

• Conversations with the student
• Input from teachers and staff
• Parent or guardian discussions
• School attendance and disciplinary history
• Academic performance
• Previous interventions or support plans

The purpose is not to determine guilt or assign punishment. Instead, the team evaluates whether the behavior represents a temporary concern that can be addressed through school-based supports or whether additional assessment is needed.

Many cases are successfully resolved at this level through targeted interventions, counseling, increased monitoring, restorative practices, or adjustments to existing student support plans.

For most students, early intervention prevents further escalation while connecting them with the resources they need to succeed.

Level 2: Coordinated Support for Complex Cases

Some situations require resources beyond what a single school can reasonably provide.

When behaviors indicate a higher level of concern, involve significant complexity, or require expertise from multiple agencies, the assessment moves to Level 2.

Level 2 expands the response from an individual school to a broader multidisciplinary team that may include:

• District Behavioral Threat Assessment specialists
• Licensed mental health professionals
• Law enforcement representatives
• Juvenile justice partners
• Social service agencies
• Community behavioral health providers

Rather than replacing the school-based team, Level 2 builds upon the work already completed during the initial assessment.

This expanded team conducts a more comprehensive review of the situation, incorporates additional information when appropriate, and develops coordinated intervention strategies that extend beyond the school's resources.

These plans may include:

• Comprehensive behavioral health evaluations
• Community-based counseling or treatment
• Family support services
• Long-term case management
• Coordinated safety planning
• Ongoing progress monitoring across agencies

The emphasis remains on intervention rather than exclusion.

By bringing together education, mental health, public safety, and community organizations, districts can address the underlying factors contributing to concerning behavior while reducing the likelihood of future incidents.

One Process, Two Levels of Support

It is important to recognize that Level 1 and Level 2 are not competing approaches.

They are designed to work together.

Most concerns begin and end with Level 1 because schools are well positioned to identify changes in student behavior early and provide immediate support.

Only a small percentage of cases require escalation to Level 2, where additional expertise, community partnerships, and specialized resources become necessary.

This tiered approach allows districts to allocate resources efficiently while ensuring every student receives an appropriate level of assessment and intervention.

Most importantly, it reinforces the principle that Behavioral Threat Assessment is not about labeling students or predicting violence.

It is about understanding risk, coordinating support, and intervening before concerns develop into crises.

From Passive Monitoring to Active Intervention

Traditional approaches to school safety often relied on waiting for disciplinary incidents to accumulate before action was taken.

Behavioral Threat Assessment changes that model.

Instead of reacting after problems escalate, districts establish structured processes that encourage early reporting, multidisciplinary collaboration, and ongoing follow-up.

This shift transforms school safety from passive observation into active intervention.

Rather than asking whether a student should be punished, teams ask a more meaningful question:

What support does this student need today to reduce risk tomorrow?

That question sits at the heart of every successful Behavioral Threat Assessment program and reflects the philosophy of Prevention by Intervention™.

From Assessment to Action: How Level 1 and Level 2 Work Together

Behavioral Threat Assessment is most effective when it functions as a coordinated process rather than a series of isolated decisions.

Once a concern has been identified, the objective is not simply to complete an assessment. The goal is to ensure the right people have the right information at the right time so they can make informed decisions and provide appropriate support.

That coordination is what transforms Behavioral Threat Assessment from a compliance exercise into a meaningful school safety strategy.

Every Assessment Begins with Information

Most Behavioral Threat Assessments begin the same way: someone notices something that doesn't seem right.

The concern may come from a teacher who observes a sudden change in behavior, a student who reports something a classmate said, a parent who shares new information, or an anonymous reporting system that flags a potential concern.

No single observation tells the whole story.

Instead, Behavioral Threat Assessment encourages schools to gather information from multiple sources before determining the level of risk or deciding on the next steps.

This measured approach helps teams distinguish between a student experiencing temporary distress and a situation that may require a more comprehensive response.

Escalation Should Be Intentional, Not Automatic

One of the biggest misconceptions about Behavioral Threat Assessment is that every concerning behavior leads to a large investigation.

Most situations do not require escalation beyond the school-based team.

Level 1 teams are intentionally designed to resolve the majority of concerns through appropriate interventions, student support, and ongoing monitoring. Only when the available information indicates a higher level of risk, greater complexity, or the need for specialized expertise should a case move to Level 2.

That deliberate decision-making process helps districts focus resources where they are needed most while avoiding unnecessary intervention in lower-risk situations.

Escalation is not a sign that the school has failed. It is a recognition that some situations require additional expertise and broader collaboration.

Community Partnerships Strengthen Intervention

When a case moves beyond the school's resources, successful intervention depends on strong partnerships across the community.

Level 2 Behavioral Threat Assessment brings together professionals who each contribute a different perspective, including district leadership, mental health providers, law enforcement, juvenile justice partners, and social service agencies.

Rather than working independently, these organizations coordinate their efforts around a shared objective: reducing risk while providing meaningful support for the student.

This collaborative approach allows districts to address factors that often extend beyond the classroom, including mental health needs, family challenges, trauma, and access to community resources.

The result is a more comprehensive intervention plan that supports both the student and the broader school community.

Technology Connects the Process

As Behavioral Threat Assessment programs mature, managing information becomes just as important as gathering it.

Without structured workflows, important details can remain isolated in emails, spreadsheets, handwritten notes, or disconnected systems. Follow-up activities may be delayed, documentation becomes inconsistent, and communication between teams becomes more difficult.

Technology helps eliminate those gaps.

Modern Behavioral Threat Assessment platforms allow authorized team members to document concerns, assign responsibilities, track interventions, monitor progress, and maintain a complete case history within a secure environment.

This creates a shared operational picture that improves accountability while ensuring no critical step is overlooked.

More importantly, technology supports collaboration without replacing professional judgment. Decisions continue to be made by multidisciplinary teams, while the platform provides the structure needed to manage increasingly complex cases consistently and efficiently.

Coordinating Across Every Level

Effective Behavioral Threat Assessment extends beyond a single school.

Each level of the education system plays a different role in supporting Prevention by Intervention™, and each requires different information to make informed decisions.

School Level

School-based teams focus on individual students.

Their priority is identifying concerning behaviors, conducting initial assessments, implementing interventions, and monitoring student progress within the school environment.

Because they interact with students every day, they are often the first to recognize changes that may warrant additional attention.

District Level

District leaders provide oversight and consistency.

They establish policies, ensure schools follow standardized assessment procedures, allocate resources, monitor trends, and support campuses managing more complex situations.

District leadership also helps ensure that students continue receiving appropriate support if they transfer between schools within the district.

Regional and Community Partners

Not every district has immediate access to specialized behavioral health services or dedicated Level 2 resources.

Regional education agencies, county offices, mental health providers, law enforcement, and other community organizations help fill those gaps by providing expertise that individual schools may not have internally.

These partnerships become especially valuable when a case requires coordinated intervention across multiple organizations.

State Leadership

At the statewide level, agencies establish the policies, guidance, funding, and training that support consistent Behavioral Threat Assessment practices across districts.

Rather than managing individual cases, state leaders focus on creating the framework that enables schools and districts to implement evidence-based programs while maintaining legal, privacy, and reporting requirements.

When every level understands its role, Behavioral Threat Assessment becomes more than a school-based initiative.

It becomes a coordinated system that allows educators, district leaders, mental health professionals, law enforcement, and community partners to work together toward the same goal: identifying concerns early, providing meaningful intervention, and creating safer schools for every student.

Technology That Supports Prevention by Intervention™

Behavioral Threat Assessment is only as effective as the processes that support it.

Even the most experienced multidisciplinary teams can struggle when information is scattered across emails, spreadsheets, paper files, or disconnected systems. Delayed communication, inconsistent documentation, and missed follow-up activities can make it more difficult to coordinate timely interventions and maintain continuity as cases evolve.

Technology helps bring those processes together.

A modern Behavioral Threat Assessment platform provides a centralized environment where authorized team members can receive reports, manage cases, document assessments, assign follow-up actions, monitor interventions, and securely share information with approved stakeholders. Rather than replacing professional judgment, technology provides the structure that helps multidisciplinary teams work more efficiently and consistently.

When reporting, documentation, communication, and case management exist within a single platform, districts gain greater visibility into student support efforts while reducing administrative burden and improving collaboration across schools and departments.

Most importantly, educators spend less time managing information and more time supporting students.

How Kokomo24/7® Supports Behavioral Threat Assessment

Kokomo24/7® CASES™ is designed to help districts operationalize Behavioral Threat Assessment through secure, structured workflows that support collaboration at every stage of the process.

The platform enables multidisciplinary teams to:

• Receive and manage behavioral concern reports.
• Assign cases to appropriate Level 1 or Level 2 assessment teams.
• Document assessments, interventions, and follow-up activities.
• Maintain a complete history of case actions and supporting documentation.
• Track progress through customizable workflows and automated task management.
• Generate reports that support oversight, accountability, and continuous improvement.
• Securely share information with authorized district personnel and community partners, including law enforcement when appropriate.

By connecting reporting, case management, communication, and documentation within a single platform, Kokomo24/7® helps districts strengthen coordination while supporting consistent Behavioral Threat Assessment practices across every school.

Building Safer Schools Through Early Intervention

Every Behavioral Threat Assessment begins with a single observation.

What determines the outcome is how that information is evaluated, shared, and acted upon.

Successful districts understand that school safety is not built through discipline alone. It is strengthened through early identification, multidisciplinary collaboration, and coordinated intervention that connects students with the support they need before concerns escalate.

Level 1 and Level 2 Behavioral Threat Assessment provide the framework for making that possible. Together, they enable schools to respond proportionately, engage the right expertise at the right time, and create consistent processes that balance student well-being with campus safety.

Technology strengthens that framework by giving teams the tools to collaborate more effectively, document decisions, and maintain continuity as cases move from initial concern to long-term support.

At its core, Behavioral Threat Assessment is not about predicting violence or labeling students. It is about recognizing that concerning behavior often represents an opportunity to intervene.

When schools combine evidence-based assessment practices with coordinated workflows and a commitment to Prevention by Intervention™, they create learning environments that are safer, more supportive, and better equipped to help every student succeed.