Insights / Schools

Transient vs. Substantive Threats in Education: The CSTAG Model Explained

By Warren Pulley

Not every threat is a real threat. A student who says “I’m going to kill you” after losing a game is not the same as a student who has a grudge, a plan, and access to a weapon. Schools need a consistent way to tell the difference.

What CSTAG is

The Comprehensive School Threat Assessment Guidelines (CSTAG), developed by Dr. Dewey Cornell and colleagues at the University of Virginia, give school teams a decision-tree approach to threats. The model is built around resolving most cases quickly and focusing resources on the few that need them.

Transient threats

A transient threat is an expression of anger, frustration, or humor that does not reflect a lasting intent to harm. It can usually be resolved on the spot with an apology, clarification, or a conversation. It still deserves a response and documentation.

Substantive threats

A substantive threat reflects a sustained intent to harm. Signs include specific details, repeated statements, recruitment of others, planning, or access to weapons. Substantive threats require protective action, a full assessment, a safety plan, and often law enforcement and parent involvement.

Why the distinction matters

Treating every threat as substantive overwhelms teams, alienates students, and pushes kids out of school unnecessarily. Treating every threat as transient misses the dangerous few. A clear model keeps responses proportionate and defensible.

Getting started

• Name a trained team and a single intake point.
• Train staff on what to report and how.
• Use the same forms and decision steps every time.
• Review cases periodically to see whether responses were consistent.

This general information is not legal advice.