UVU Review Finds No Written Security Plan Before Kirk Shooting

Utah Valley University had no written threat assessment or event action plan for the 10 September 2025 campus appearance when Charlie Kirk was shot dead, according to an independent external review released by the university. The review was summarized by the university on 26 September 2026 and reported by BBC.

Kirk, 31, was addressing thousands of people in a campus courtyard in Orem when he was shot from a nearby rooftop. The university commissioned the review and published the full findings as an After-Action Report.

Investigators found the university deferred key decision-making about the event to Turning Point USA, the visiting organisation. No written threat assessment (a formal review of possible dangers) was completed. No event action plan (a written guide for staffing, communication and emergency response) was prepared. No line-of-sight assessment (a check of what could be seen from high points) was documented in the planning process, according to the After-Action Report. These papers work like a checklist, showing what risks were seen and what was done.

The choice of venue was contested in advance. A Turning Point representative insisted Kirk speak at the courtyard because he had been there previously and the organisation was familiar with the location. University officials raised concerns in August 2025 about holding the event at a location surrounded by tall buildings. They suggested alternative venues, including indoor venues. Those alternatives were not adopted.

Coordination between university police and Kirk's private security team fell short. The university's police chief texted Kirk's private security adviser to meet about final safety measures, as reported by the Salt Lake Tribune, but a proposed meeting between the chief and Turning Point security shortly before the event did not take place. The review found no joint walk-through or unified command structure (a shared system for making decisions during the event) was documented.

The review concluded that no university employee or representative "acted in bad faith or showed willful and wanton disregard for safety." UVU President Jon Anderson said the university "must learn from the findings of the review and follow through on its recommendations," according to BBC. The university statement announcing the release is posted here.

Reaction differs. An attorney for Kirk's family said university security was understaffed and unprepared for the event, a position reported by KUTV. The family plans to sue the university over alleged security failures, a plan first reported on 16 September 2026 by Reuters. That earlier reporting also noted Turning Point USA had warned university police about security risks posed by rooftops overlooking the venue.

Tyler Robinson has pleaded not guilty to aggravated murder in connection with Kirk's death, with prosecutors seeking the death penalty.

The broader context here is who holds responsibility for safety when a public university hosts an outside political organisation. Standard practice puts the host in charge of site selection, perimeter control, screening of elevated positions and coordination between security teams, even when the guest brings private protection. Written records show what was considered and decided. Without them, investigators must rebuild the picture from texts and memories. For administrators, the lesson from UVU is direct. Deference to a repeat visitor on logistics can set aside physical security concerns, and a missed meeting between public police and a private detail can leave gaps that become clear only after firing starts.