Seung-Hui Cho, the killer at Virginia Tech, averaged shooting a victim about every 10 seconds during his rampage. And there was no delay by first responders at Norris Hall. Some of the damage will already be done. Nothing we can do about that. In our damage control mode we have to engage the killer as quickly as possible. Simply put, if the killer is killing, kill the killer.
Questions arise such as what if it's an ambush? What if the shooter has superior firepower? What if there are IEDs involved? What if there's more than one shooter? Yes, these are concerns, but we can "what if" innocent victims to death.
Look at it like emergency trauma surgery. A surgeon would certainly like to have all the relevant information and diagnostics before opening the patient. But while they wait for MRIs or CAT scans, the patient dies. When the time is now, you go with the personnel, weapon, equipment, and intel you have at the time.
I began teaching the class, "Patrol Response to Active Shooters," for the National Tactical Officers Association (NTOA) shortly after Columbine. The protocol was three or four officers forming a diamond or "T" formation to engage a subject or clear a building.
A few years ago, a few active-shooter-response instructors (including myself) began endorsing an immediate response of one or two officers. Initially, some viewed this as heresy. We began to advocate this response under the radar. We were finding that waiting for three or four officers was costing lives or delaying the rescue of those already injured. A majority of my students have embraced this concept.