I thought it was a pretty good response.

From the article:

> If those students who issued the threats can be identified, they will be subject to appropriate disciplinary action.

It sounds like they don't know who the students are yet, so they can't punish anybody. Anyway, I'd rather they say "appropriate disciplinary action", because it implies they'll actually try to find out the full story, which is how I want an administration to behave.