I have worked the White House Correspondents’ Dinner as an advance person for President Clinton, and I’ve staffed other events in that ballroom for Presidents Obama and Biden. I know the Washington Hilton well. I know its chokepoints, its sight lines, and the way the Secret Service modifies the space when the President is in the building. Given that the President is there several times a year and given its history, the venue has been specifically adapted to support the security that surrounds the President.
So when I watched Saturday night unfold, my reaction was probably different from most people’s. The immediate instinct — watching the footage, reading the headlines — is to see a failure. A man with a shotgun and a handgun made it to the magnetometers outside the ballroom and fired a round that struck a Secret Service officer in the chest.
That officer survived because he was wearing a ballistic vest. The suspect was tackled, disarmed, and taken into custody. The President, Vice President, Speaker of the House, and every Cabinet member in attendance were evacuated within moments.
Nobody died. The President never saw the suspect. Security did what it was designed to do.
Defense in Depth
Any event the President attends is built around a series of perimeters. Each one has a different purpose, a different threshold, and a different cost profile. Different credentials and requirements are needed to move from one to the next. The concept is called defense in depth, and it is designed to filter out progressively more serious threats — from the disorganized to the organized, from the opportunistic to the deliberate.
The outermost perimeters are broad and relatively permissive. They exist to manage the general environment, deter casual threats, and create early warning. The innermost ones are absolute. The event perimeter — the one directly controlled by the Secret Service — is where things get serious. No one gets past that checkpoint without passing through a series of checks, both active and passive.
That is the perimeter the suspect attempted to breach by force on Saturday night. And it is the one that stopped him. He charged through the magnetometers, fired a shot, and was immediately engaged by Secret Service agents who took him down. He never made it into the ballroom. The President was already being evacuated. It is precisely because of the Secret Service’s training, planning, and layered positioning that he was stopped before he could even see the President, much less cause harm.
The multilayered protection worked.
The Hotel Problem
A lot of the public conversation has focused on how a man with a disassembled long gun got into the hotel in the first place. One attendee told reporters that nobody checked his bags when he checked in on Friday, and that he could move freely between floors without being stopped or screened.
This sounds alarming. It also reflects a reasonable security decision.
The Washington Hilton is a large commercial hotel. The suspect had a reservation — he checked in the day before the event. His room key gave him access to the elevators, the stairwells, and the common areas. Controlling an entire hotel at the level required to catch a disassembled weapon in a guest’s luggage would require weeks of planning, days of operational disruption, and an enormous commitment of manpower. Every access point would have to be locked or manned. Every guest’s belongings would have to be physically searched. The hotel would effectively cease to function as a hotel.
That is a cost calculus, and it matters. Security operations exist within real constraints — time, money, manpower, disruption to the venue’s business, and tolerance of the public. It would be extraordinarily expensive (in both dollars and friction) to search the belongings of every hotel guest. Instead, guests are reviewed through less intrusive means. Physical searches of their bags are done only when other signals — intelligence, behavioral cues, background flags — suggest that additional investigation is warranted.
Could those less intrusive checks have caught the suspect? Possibly. There are several kinds of background checks that could have surfaced his online threats. But the data required for those more thorough digital reviews is too intrusive to ask of hotel guests who are merely “in the area” and not expected inside the event perimeter. The standard checks available with the information a hotel collects at check-in (name, ID, credit card) would not include social media history or personal communications.
The NSSE Question
Saturday night’s dinner was not designated a National Special Security Event. That designation — which is made by the Secretary of Homeland Security — places the Secret Service as the lead agency with formal interagency coordination, enhanced operational authorities, and access to a much wider set of federal resources. NSSEs bring in the FBI for intelligence and counterterrorism, FEMA for consequence management, and often include pre-positioned tactical teams, nuclear incident response assets, and dedicated communications infrastructure. The security apparatus for an NSSE is enormous. Presidential inaugurations get the designation. State of the Union addresses get it. Presidential nominating conventions get it. The Super Bowl gets it.
The WHCD does not, and there is a reasonable argument for why. An NSSE designation comes with extraordinary expense — not just for the federal government, but for the state and local jurisdictions that have to support it. Local law enforcement, public safety agencies, and municipal governments absorb significant costs in overtime, traffic management, road closures, and civic disruption, often without dedicated federal reimbursement (NSSE designation is not, by itself, a funding mechanism). In a city like Washington, where the President moves through public spaces regularly and attends events at commercial venues throughout the year, designating every Presidential appearance as an NSSE would be operationally unsustainable and financially ruinous for the District.
The fact that Saturday’s event performed as well as it did without that designation tells you something about the baseline capability that already exists around Presidential protection. The layered perimeters held. The final checkpoint did exactly what it was designed to do. The President was protected.
The Economics of Security
Security is never about 100% effectiveness. Security is about mitigating risk — balancing the probability and severity of a threat against the cost and disruption of the measures used to address it.
The larger the perimeter, the more resource-intensive it becomes. The more stringent the checkpoint, the more manpower and equipment required. You can’t run the most thorough search at the widest perimeter — the math doesn’t work. So you design a system where each perimeter does what it can at a cost that is proportionate, and the cumulative effect is what protects the principal.
This is the tension that security professionals work inside every day. The question is never “could we have done more?” The answer to that is always yes. The question is whether the additional measure is proportionate to the threat it addresses, given everything it costs and everything it displaces.
What This Means
Since my time as an advance person, I have been working in risk — business risk, cybersecurity, human risk. The equation is the same everywhere: balance cost against benefit, accept that perfection is impossible, and build systems that degrade gracefully when individual components fail.
The suspect on Saturday night used deliberate means to cross several perimeters. He had a reservation. He used a stairwell instead of an elevator to avoid monitored areas. He concealed weapons in a bag. Each of those steps got him closer — but the system was designed so that “closer” was not close enough. The final perimeter caught him.
That is what defense in depth looks like when it works. The outer layers aren’t supposed to catch everyone. They’re supposed to catch most threats, and to force the ones that get through to expose themselves at the next layer. By the time the suspect reached the magnetometers, he had no choice but to charge through them — and that is exactly the moment the system is built to handle.
The impulse after an event like this is to ask what went wrong, and there will be hearings, investigations, and after-action reviews that address exactly that. But the better question — and the harder one — is what would need to change to stop someone like this even earlier, and whether that change is worth what it costs. Not just in dollars, but in disruption, in civil liberties, in the friction imposed on thousands of people who pose no threat at all.
The officer who took a round to his vest is expected to recover fully. The President never saw the suspect. The system was tested on Saturday night, and it held.