"There is a bomb in Centennial Park. You have 30 minutes." A 911 dispatcher couldn't enter the address. Ten of the 22 minutes were lost. A private security guard saw the bag and started evacuating anyway.
At 12:58 AM on July 27, 1996, a pay phone near Centennial Olympic Park in Atlanta rang through to a 911 operator. The caller was Eric Rudolph, though that would not be known for nearly two years. His message was eleven words: "There is a bomb in Centennial Park. You have 30 minutes."
The 911 operator took the call and immediately tried to notify Atlanta Police. What followed was a ten-minute cascade of small failures that, taken individually, might seem forgivable. Taken together, they consumed more than a third of the time between the warning and the detonation. Bad phone connections to the command center. Jammed lines. A frantic search for the address in the CAD system. The word "Centennial" would not enter. The operator asked how to spell it. Then tried removing "Park." Then wondered aloud if this was Zone 3, where Olympic Stadium was.
Meanwhile, at roughly the same moment, Richard Jewell — a 33-year-old private security guard working the AT&T pavilion — noticed an unattended olive-green knapsack under a bench near the sound tower. He alerted Georgia Bureau of Investigation officer Tom Davis. Davis called in a bomb squad. They began moving people back. The crowd of beer-cup-waving concertgoers did not move quickly. The bomb detonated two to three minutes into the evacuation, before all spectators could leave the area.
What the comm center saw, and when. Color coding indicates the operational dimension.
The comm center story is specific and documented: there was a 911 call, there was a ten-minute delay in getting officers notified, and there was a private citizen who saw the bag and started an evacuation before any of that notification reached the park. The question this exercise asks is not whether what happened was anyone's fault. The question is what your center's process looks like when an anonymous bomb threat comes in, and whether that process is faster than what Atlanta had in 1996.
The 911 call and the security guard's discovery of the bag happened independently and nearly simultaneously. Jewell spotted the knapsack and alerted GBI officer Tom Davis at roughly the same time the 911 call was being relayed through the dispatch system. The evacuation that saved lives was initiated by a private citizen who had no idea a 911 call had already been made. The comm center and the park were not in communication. This exercise asks: in your jurisdiction, for a large pre-planned special event, are those two tracks connected?
The first instinct in Atlanta was to find the caller, not move on the threat. Units were initially dispatched to the pay phone at the Days Inn to locate who called — not to Centennial Park to evacuate it. That decision cost time the dispatcher did not have. Bomb threat protocols should specify that the first dispatch is to the threat location, not the caller location. The caller search is parallel and secondary.
CAD address matching for major venues is a pre-incident planning item, not a real-time discovery. Centennial Olympic Park had been the centerpiece of Atlanta for two weeks and drew 15,000 people a night. Neither the operator nor the dispatcher knew how it was stored. Before any major planned event, verify with your CAD administrator how the venue is addressable, test-dispatch a call, and confirm it resolves. Five minutes of work that mattered enormously here.
Two parallel warning tracks with no link between them is a structural gap. Jewell's evacuation and the 911 call were running simultaneously through completely separate channels. If Jewell had been able to reach a direct line to the officer in charge at the park, and if that officer had been in contact with the comm center, the evacuation might have started faster. For large pre-planned events, establish a direct phone or radio link between event security command and 911 — not just a unified command structure on paper.
Verbal warnings to a 15,000-person concert crowd are the slowest possible evacuation method. The concert sound system was the fastest tool available — and it was not used. From the comm center perspective: who has the authority to order a venue to use its PA system? Is that the dispatcher, the supervisor, the IC, or nobody? Does your center have contact information for the event's sound production operator? In 1996, this was not standard. In 2026, it still varies by jurisdiction.
Of 22 minutes between warning and detonation, only 10 were actually usable. The 10-minute dispatch delay made evacuation of 15,000 people from an open park impossible no matter how the rest of the response went. That math matters for how you plan large-event response — every minute of dispatch delay is a minute removed from a window that may already be inadequate.
Visible security presence is not the same as effective threat detection. Centennial Park had no metal detectors, no bag checks, no formal perimeter screening — it was open 24/7 during the Games. Rudolph walked in with a backpack full of pipe bombs, set it down, and walked away. The "massive security effort" did not prevent any of that. What stopped the death toll from being far higher was one alert private security guard. The first notification of an actual threat often comes from someone with no formal role in security.
Parallel notification protocols that depend on someone else to make the call without verification are the weakest link. The Atlanta transcript shows a field unit being told to notify state police — and the transcript contains no indication state police were actually reached before detonation. Bomb threat protocols should assign specific notification responsibilities by name or role, not "advise the appropriate agencies." Each notification should be confirmed back to the dispatcher and documented in CAD, not assumed to have happened because someone was told to do it.
Comm center records are sensitive material. Jewell's wrongful public accusation destroyed three months of his life. The anonymous source who identified him to the Atlanta Journal-Constitution was never publicly named. Dispatch recordings, CAD notes, and call logs become investigative materials — they can also become leak material. Post-incident information security is a protocol question that belongs in training alongside call handling.
No right answers. Tap a question to expand the analysis. Use one or all — whatever fits your time.
The Atlanta transcript shows the gap between receiving the call and dispatching to the threat location rather than the pay phone. The first instinct was to find the caller rather than to move on the threat. That decision cost time the dispatcher did not have.
Most centers have a bomb threat protocol that includes: notifying the supervisor, contacting the threat location, initiating law enforcement response, and contacting the bomb squad. The question is the sequence and who owns each step.
In Atlanta, the confusion about whether the dispatcher or a field unit was responsible for notifying state police — and the absence of confirmation that it happened — is the single most correctable failure in the transcript.
For your center: pull your bomb threat protocol. Does it specify who notifies the venue directly? Who calls the bomb squad? Who confirms state or federal partner notification? Are those steps checked off by the dispatcher, or does the protocol assume someone else is handling it?
This is not primarily a technology failure — it is a training failure. The dispatcher and operator did not know how Centennial Olympic Park was stored in their system. For a venue that had been the centerpiece of the Atlanta Olympics for two weeks and that was drawing 15,000 people a night, that gap is a pre-incident planning failure.
CAD address matching for major venues, event locations, and non-standard sites is something that should be validated before events begin. How is your county fairground stored? Your sports stadium? Your downtown concert venue? If a caller says "the park by the river" or the name of a new development that was just built, does your dispatcher know how to find it?
The practical fix: before any major planned event in your jurisdiction, verify with your CAD administrator how the venue is addressable in your system. Dispatch it. Confirm it resolves. That exercise takes five minutes and could matter enormously. Atlanta had the Olympics in their city and did not do it.
The Centennial Park bombing produced a partial evacuation because a private security guard acted correctly without knowing about the 911 call, while a 911 call was being processed without any direct link to the security team on the ground at the park. Two parallel warning systems that were not connected to each other.
At large pre-planned events, best practice is to establish a unified command structure that integrates private event security with local law enforcement, and to have a direct radio or phone link between the event's security command and the 911 comm center. If Jewell had been able to call a direct line to the officer in charge at the park rather than flagging down a GBI agent he happened to find, and if that officer had been in contact with the comm center, the evacuation might have started faster.
For your jurisdiction: what is your pre-planned event protocol? Does your comm center have a direct contact at the event security command post? Do they have a way to reach you other than 911? Is there a designated liaison between the event and law enforcement before the event starts?
This is a mass notification question. Verbal instructions from officers moving through a crowd of 15,000 people at a concert are the slowest possible evacuation method. The most effective tool available was the concert sound system — if it had been commandeered to announce a clear evacuation order, it would have reached all 15,000 people simultaneously rather than requiring officers to personally direct each cluster of attendees.
From the comm center perspective: who has the authority to order a venue to use its public address system? Is that call made by the dispatcher, the supervisor, the incident commander on scene, or nobody? Does your center have contact information for the event sound production operator? In 1996, this was not standard. In 2026, it still varies by jurisdiction.
Additionally: given that only 10 of the 22 minutes between the 911 call and detonation were actually available for evacuation after the delay, the practical window for moving 15,000 people was never realistic without immediate, large-scale notification tools. That math matters for how you plan large event response.
Centennial Olympic Park had no metal detectors, no bag checks, and no formal perimeter screening for a park that was open to the public 24 hours a day during the Games. The security investment went to the ticketed venues, the athlete compounds, and the official event sites. The public gathering space — described as the "spiritual heart" of the Games — was open access.
Rudolph walked in carrying a backpack full of pipe bombs. He set it down. He walked away. He called 911 from a pay phone. The "massive security effort" did not prevent any of that. What stopped the death toll from being far higher was one alert private security guard.
For dispatchers and training coordinators: visible security presence is not the same as effective threat detection. The lesson for comm centers is that the first notification of an actual threat often comes from someone who has no formal role in security — a vendor, a passerby, a security guard from an adjacent property. Your protocols should be as ready to receive and act on those calls as they are to receive calls from law enforcement.
This question sits at the edge of dispatch operations but is worth raising: the information environment after a major incident is shaped by what law enforcement communicates, and the comm center is often the first repository of information about who made what call, who was at a scene, and what was reported. Dispatch recordings, CAD notes, and call logs become investigative materials. They can also become leak material.
Jewell's wrongful public accusation destroyed three months of his life and is now studied as a case study in media irresponsibility and law enforcement information leakage. The anonymous source who identified him to the Atlanta Journal-Constitution was never publicly named. The FBI later acknowledged it had no direct evidence implicating him.
For comm centers: your records are sensitive. Your personnel have access to information that, if disclosed without authorization, can cause real harm to real people. Post-incident information security — who can discuss a call, to whom, in what context — is a protocol question that belongs in your training alongside call handling and dispatch procedures.
Five questions. Answer, then submit for inline feedback. Progress saves locally.