An independent review of the security arrangements at Utah Valley University on the day conservative activist Charlie Kirk was shot dead has identified a catalogue of failures in how the event was planned, organised and policed, according to the report published by the university.
The review, carried out by external consultants, says UVU never conducted a proper written security assessment for the appearance and did not prepare a formal event action plan. Instead, key decision-making about how the event would be run was effectively deferred to Kirk's organisation, Turning Point USA. That shift in responsibility, the reviewers suggested, left the institution without a clear chain of command on the day.
The 31-year-old activist was speaking to thousands of people in a courtyard on the university's Orem campus in Utah on 10 September 2025 when he was shot in the neck from a nearby rooftop shortly after noon. Images from the event show Kirk throwing hats into the crowd moments before he was fatally wounded, with about 3,000 people gathered in the open space between tall buildings. He was rushed to hospital but later pronounced dead. His alleged killer, Tyler Robinson, has pleaded not guilty to aggravated murder, and prosecutors are seeking the death penalty.
Central to the review's findings is the venue itself. University officials raised concerns in August 2025 about holding the event at a location surrounded by tall buildings, and suggested alternative venues, including options indoors. But a Turning Point representative insisted that Kirk speak in the campus courtyard, arguing that he had addressed the same location previously and that the organisation was already familiar with it.
The report says Kirk's aides insisted on an outdoor venue, effectively overriding the security concerns raised by campus officials — who, in turn, failed to properly assess the dangers created by that decision. The reviewers noted that the physical setting gave rise to "significant protective operations considerations", yet no line-of-sight assessment — that is, no analysis of what could be seen from where, or of the vantage points available to an attacker — was documented anywhere in the planning process.
Coordination between the two security operations was also found wanting. The review identified shortcomings in how university police worked alongside Kirk's own private security team. A proposed meeting between the university's police chief and Turning Point's security personnel shortly before the event never took place, and there was no joint security briefing or walk-through of the site. The reviewers described that absence as a missed opportunity: such a session, they said, would have helped identify risks, clarify who was responsible for what, and consider additional protective measures.
That failure drew a sharp reaction from Kirk's family, who had previously accused the university of serious security failures and have filed a wrongful-death notice — a formal step that can precede legal action. The family's lawyer, Brett Parkinson, said the independent report backed up the concerns raised by those close to Kirk.
"The buck stopped with UVU leadership and law enforcement," Parkinson said in a statement to the Associated Press. "Justice for Charlie and his family requires true accountability for UVU's fatal shortcomings that day."
When asked to comment on the findings, Turning Point USA referred to Parkinson's statement rather than addressing the report directly. The referral to the family's lawyer signals that any dispute over responsibility is likely to be fought on legal rather than public-relations ground.
One finding, however, cut in the university's favour. The review concluded that no university employee or representative had acted in bad faith or shown what Utah's legal standard describes as "willful and wanton disregard" for anyone's safety. In effect, the investigators found failures of process and judgement rather than deliberate misconduct. That distinction is significant in a wrongful-death context, where liability typically requires proof that a duty of care was breached and that the breach caused harm — a considerably higher bar than simple negligence.
Even so, the wording of Parkinson's response suggests the family's legal case is not primarily about individual intent, but about institutional accountability. The emphasis on UVU's "fatal shortcomings" points instead toward questions of adequacy: whether a reasonable security assessment was carried out, whether risks known to officials were properly evaluated, and whether a university hosting a high-profile figure amid a climate of US gun violence should have insisted on safeguards regardless of the promoter's preferences.
The circumstances of the event have drawn particular attention. Kirk was appearing at UVU to debate students about mass shootings in the United States — part of a wider series of events staged on university campuses. The location, the subject matter, and the political profile of the speaker combined with an exposed venue ringed by rooftops, precisely the combination that security planners are trained to treat as high risk.
It has previously been reported that campus police did not carry out several precautions now considered standard at high-profile events, among them flying a drone to monitor surrounding rooftops and conducting security screening such as bag checks and metal-detector checks. The review's recommendations are aimed at improving security for major campus events more broadly, and the report makes clear that the deficiencies were not isolated lapses on a single afternoon but gaps in institutional practice.
UVU President Jon Anderson said the university must "learn from the findings of this review, and follow through on its recommendations". That commitment now sits alongside a pending legal claim, sustained public pressure from a nationally prominent family, and a prosecution in which the death penalty is being sought. For an institution that hosted one of the most heavily scrutinised political events in recent American memory, the review's clearest message is that documentation, communication and pre-emptive planning are not administrative details — they are, in the investigators' view, the difference between an event and a tragedy.
Comments (0)