Why not? I've been peripherally involved with the planning of drills, and I see long lists of things that can't be hit. Sometimes the only legal exercise target is the vending machine by the loading dock becuase everyone is afraid of potentially interfering with normal operations. Same kind of thinking says "well, it's just a firedrill, we won't evacuate anyone becuase we've never had a real fire before."

The only thing I'd say is off limits for this kind of drill is ED, OR and pediatrics. Although those are other places where a nut is likely to crack.

But from what I've seen of this, there is plenty of blame to go around. Sounds like the security director was a twit, but they guy who was telling him to run a drill without training or budget needs to go to.