Maintain the appropriate level of alertness to enable the ability to foresee, adapt, and act to situations.
Alertness is not paranoia, fear, or constant stress. It is the deliberate management of attention based on environment, timing, and threat probability. Most failures in personal safety, emergency response, or crisis decision-making do not occur because people lack skills or tools, but because they fail to recognize cues early enough to act decisively. Alertness is the foundation that allows all other skills to function.
Alertness determines how early you detect change, how accurately you interpret it, and how much time you have to respond. Early recognition buys time; time creates options; options increase survivability. Poor alertness compresses timelines and forces rushed, reactive decisions under stress.
Our mind is like a computer, we have data input, data processing, and data output. Without the required alertness level, data input will be delayed and processing/output will be less efficient.
When alertness is low, critical data is either missed entirely or registered too late to be useful. When alertness is excessive or unmanaged, the system overloads, causing errors, fixation, or panic. Optimal alertness balances awareness without fixation.
Utilize a decision making process known as the OODA Loop in concert with your situational awareness level (or alertness) as defined in Jeff Cooper’s Color Code system.
The Color Code system defines your mental posture, while the OODA Loop defines how you process and act on information. One without the other is incomplete. Awareness without decision-making leads to hesitation. Decision-making without awareness leads to poor inputs and flawed outcomes.
Modified Variant of Jeff Cooper’s Color Codes: These levels of a person's mental state dictate their ability to be alert or aware.
》White: Tuned out to your surroundings, unaware and unprepared.
This state is appropriate only in controlled, secure environments. White should be deliberate, not habitual. Remaining in White in public or transitional spaces creates vulnerability because you are relying on reaction rather than recognition.
Examples of White: • Sleeping at home with doors locked • Relaxing in a secure, known environment with trusted people • Deep focus on a task where outside threats are controlled
》Yellow: The sweet spot. Good situational awareness; not scared, simply prepared.
Yellow is a relaxed but attentive state. You are passively observing patterns, exits, people, and changes without actively searching for threats. This is the baseline state for most public and transitional environments.
Practical Indicators of Yellow: • Head up, not buried in a phone • Casual scanning of entrances, exits, and crowd behavior • Awareness of who is near you and what is normal for the environment
》Orange: Something abnormal has happened in your environment. You must assess a response.
Orange is not action yet; it is focused attention. A specific trigger has elevated your awareness. Your mental question becomes: “Is this a problem, and if so, what kind?”
Common Triggers for Orange: • Behavior that deviates from the environment’s norm • Sudden changes in crowd mood or movement • Individuals acting with urgency, concealment, or mismatch to context
》Red: Fighting through the situation. Actively engaged in the emergent response.
Red is execution. The decision has already been made, and you are acting to resolve, escape, or survive the situation. There is no debate at this stage, only action.
Examples of Red Actions: • Evading a threat • Providing emergency aid • Giving clear commands to others • Creating distance or seeking cover
》Black: Breakdown of mental and physical responses. Panicked, frozen, inability to respond.
Black is failure of cognitive processing. This occurs when stress exceeds training, experience, or mental preparedness. The goal is not to “power through” Black, but to avoid entering it by training recognition and decision-making early.
We want to stay in Yellow or fight to get back to Yellow in an emergency situation.
Clarification: After a Red-level event, returning to Yellow allows reassessment and prevents tunnel vision. Remaining in Red unnecessarily can cause missed secondary threats or poor follow-on decisions.
In a locked home around lunchtime, White is appropriate. At the checkout of a store where there is a heated argument between a customer and the clerk, Orange is appropriate. Adjust your level as needed. You cannot maintain Orange or Yellow indefinitely due to mental fatigue. Be ready when you should, relax when you can. With the right level of awareness, the success of implementing the OODA loop when a conflict arises will be heightened.
Additional Guidance: Awareness should scale with risk, not ego. The objective is sustainability. Constant hypervigilance degrades performance over time and increases the likelihood of errors.
OODA Loop (Observe, Orient, Decide, Act): Let’s say a moving truck (like a U-Haul) pulls up in front of a crowded stadium. The driver then exits the U-haul and gets picked up by an unmarked sedan that quickly leaves the area. Your Observation of this occurrence was enabled by your elevated awareness while in the Yellow allowing you to reflect and Orient what just occurred as you transition to Orange. You determine it is unnatural and uncommon to abandon a truck in a crowded area and Decide a threat may be present and a potential VBIED (vehicle borne improvised explosive device) is underway. This allows you to Act by warning others and self-evacuating while you shift into Red.
• Observe: You noticed the truck because you were scanning the environment, not because you were lucky.
• Orient: You compared the behavior against known norms for stadium activity.
• Decide: You selected a course of action based on risk, not certainty.
• Act: You executed immediately without waiting for confirmation.
This example highlights that action does not require absolute proof, only sufficient indicators to justify movement away from risk.
If you miss any of the four steps your action will be flawed. Observation determines if you need to further orient or rather "pay further attention" to what you just saw. If the observation warrants further inspect and cause for concern, then you need to make a decision. What action will best resolve the rising issue? Answer your question and perform the elicited proactive response. Without performing OODA, you'll find yourself with only reactive solutions. This always puts you at a disadvantage.
Reaction occurs after the threat has matured. Proactive action occurs while the threat is still forming. The OODA Loop allows you to stay ahead of events rather than behind them.
Practical Checklist
- Alertness Checklist: • What is normal behavior in this environment? • Where are the exits and points of congestion? • Who or what stands out as out of place? • Has anything changed recently?
- OODA Application Checklist: • What did I actually observe versus assume? • How does this compare to normal patterns? • What are my immediate options? • Which action reduces risk fastest?
- Read more on all the concepts. Download the Grayman Doctrine.
Common Errors to Avoid: • Ignoring intuition without analysis • Waiting for confirmation in time-sensitive situations • Fixating on one detail and missing the broader picture • Remaining in Orange without deciding or acting
Alertness and decisive action are learned behaviors. They improve through deliberate practice, reflection, and exposure to realistic scenarios. The objective is not to live in fear, but to move through the world with awareness, clarity, and the ability to act when it matters most.