What is the CSTAG Model and How Do Schools Use It?
- CrisisWire
- Sep 25
- 3 min read
The Need for a Structured Model
Schools face the difficult challenge of separating empty threats from credible ones. A casual comment might be brushed off, but what if it’s a warning sign? That’s where the Comprehensive School Threat Assessment Guidelines (CSTAG) come in. Developed at the University of Virginia, CSTAG provides a step-by-step framework for evaluating threats and determining the right response—balancing safety with fairness.
What is the CSTAG Model?
CSTAG is an evidence-based approach to threat assessment in schools. It focuses on:
Distinguishing threats as transient (not serious, easily resolved) or substantive (serious, requires intervention).
Looking at behavior, not stereotypes. Students are assessed based on actions, not demographics.
Prioritizing intervention over punishment. The goal is to resolve conflicts, provide support, and reduce risk.
How CSTAG Works in Practice
Step 1: Report and Intake Concern is reported by staff, students, or parents.
Step 2: Evaluate the Threat The threat is classified as transient or substantive.
Step 3: Gather Information The team investigates context: intent, means, planning, history, stressors.
Step 4: Develop an Intervention Plan Plans may involve counseling, parent involvement, disciplinary action, or law enforcement.
Step 5: Monitor and Support Intervention plans are tracked and adjusted until the risk is reduced.

Case Study: A Middle School Threat
A student writes “I’ll get you back tomorrow” in a note. Under CSTAG, the team classifies it as a transient threat after learning it stemmed from a playground dispute. Parents are contacted, a counselor meets with the student, and the matter is resolved without suspension.
Contrast: If the student had access to weapons, made detailed plans, or repeated threats, it would be classified as substantive with far more serious interventions.
Leader’s Checklist: Using CSTAG in Your School
✅ Train your threat assessment team in CSTAG principles.
✅ Establish a clear process for reporting and intake.
✅ Teach staff how to identify transient vs substantive threats.
✅ Document every threat case for accountability.
✅ Regularly review outcomes to improve decision-making.
Quick Diagnostic Quiz for School Leaders
Does your school distinguish between transient and substantive threats? Yes/No
Do you have a formal team trained in CSTAG? Yes/No
Are interventions focused on support as well as discipline? Yes/No
Do you have a process for monitoring threat cases long term? Yes/No
Scoring: If you answered “No” to more than two, your system is incomplete.
CrisisWire Playbook Insert: The CSTAG 3-Step Shortcut
Classify — Is the threat transient or substantive?
Contextualize — Investigate means, motive, and stressors.
Care + Control — Balance student support with protective measures.
Government Resources
U.S. Secret Service – Protecting America’s Schools Guide Download PDF
Virginia Model (CSTAG) Overview – University of Virginia Read Here
National Center for School Safety – Threat Assessment Resources View Toolkit
Related Reading from the Book Series
CrisisWire Integration
At CrisisWire Threat Management Solutions, we train schools to apply CSTAG effectively, ensuring teams don’t just react, but proactively prevent violence.
Our consulting includes:
CSTAG team training and certification.
Case management systems.
After-action reviews to improve school safety.
Learn more at CrisisWire Threat Management Solutions.
Conclusion
CSTAG helps schools move away from zero-tolerance policies and toward evidence-based prevention. By focusing on context, intent, and support, CSTAG makes schools safer without unnecessarily excluding students.
Comments