Playing Devils advocate here.
The employees also have a responsibility to express security concerns eg no gated compound with 24hr security - at which point the Co could offer Meydan.
Nasty event...but I'm not sure about pointing the finger at anyone other than the perp.