Security Officer Training about Investigation

1. Security Training
Incident Scene
Preservation
Faheem

3.  Policies and procedure
 Incident Scene Preservation
 Purpose:
 To identify the process of effectively investigating on-side
incidents, without allowing excessive contamination of
evidence in the scene.
 Policy:
 The crime scene is the location in which a crime occurred. It is
also the central location of a crime from which subsequent
investigative efforts will begin.

4.  Physical evidence in the form of a weapon, tool marks,
fingerprints, footprints, and fibers may be awaiting the
scrutiny of the investigator and the technicians. The value of
the crime scene rapidly deteriorates, over time. The protection
and preservation of the crime scene becomes one of the most
important responsibilities of the first officer on the scene.
His/her swift arrival may prevent the destruction or
contamination of physical evidence.

5.  Preserving the crime scene means, to keep the site of the crime
in the same physical condition as the perpetrator left it. The
security officer must prevent the deterioration of any possible
clues. Touching objects, walking on stains or footprints will
destroy the value or reliability of otherwise good evidence.
Protection and preservation of the crime scene are maintained
while the investigators and technicians proceed to sketch,
photograph, and search the area.

6.  Unauthorized persons must be stopped from entering the area.
An officer guarding a crime scene must always be mindful that
nothing within the crime scene area can be overlooked or be
considered too insignificant to protect. So-called trivia when
properly guarded and handled, have many times offered the
key to the successful conclusion of a case.

7.  It is also essential that the responding officer's) understand that
the actual area of evidence collection is frequently much more
expansive, than the original scene might suggest. A good rule
of thumb is that the immediate area must be sealed off from
entry, but also all routes of travel into, or out of the area also
sealed, up to, and including the first point at which a subject
would have to make physical contact with a hard surface, in
the process of entering or leaving the area

8.  In practice, this means the next doorway, elevator landing or
similar area where one might have to slow, or pause, in the
process of moving from one area to another. If the incident has
occurred in an area adjacent to an open hallway, a reasonable
distance of that hallway should be sealed. The first 100’ feet
would be a basic guideline, although elements of the crime,
scene or physical location may suggest a greater distance.

9.  All persons within the area to be sealed should be directed to
stay within their location, as they may be needed for
interviews. All persons to remain, must be kept out of the
crime scene area, and directed to not make physical contact
with any surface, or move about, until released by the law
Enforcement representatives

10. Procedure:
1. Upon arrival, identify the Immediate Scene. This would
be the suspected site of the actual offence.
2. Seal the Immediate Scene. No persons are to enter the
Immediate Scene, with the exception of Law
Enforcement representatives.
3. Identify the Extended Scene, defined as the possible
routes of travel, to or from, the Immediate Scene.
4. Seal the Extended Scene, out to a reasonable distance.
Be mindful of point of contact, such as doors, elevator
controls or similar location, and include all such in the
extended Scene.

11. 5. Identify any persons that might be within the Extended
Scene, and ask them to remain, so that they may be
interviewed by the law enforcement representatives.
Note: As an example, if it was suspected that a crime
has been committed in guest Room 1014, that room
and all connected rooms, would be sealed off, as the
Immediate Scene. In addition, the end of the 10th floor,
inclusive of the nearby fire stairwell, and approximately
100’ feet of the guest floor hallway, would also be seal
off. Those persons found to be in the rooms immediately
adjoining 1014 would be asked to stay in their room, for
the Law Enforcement Officials to interview.

12. INCIDENT REPORT-
INVESTIGATION
Policy
Investigating a security incident is the
responsibility of Security and the HR
Management in case of hotel employee
involvement.

13. PROCEDURE
 Security staff on duty will provide information and
description to Security Manager. This information will be
provided in writing and documented in the security log.
 Most senior personnel will visit the scene of the security
incident in order to obtain more leads that may help for a
thorough investigation.
 Head of Security and his Assistance will investigate /
interview those concerned using effective interview skills to
include effective listening, rephrasing, asking open
questions and demonstrating sincerity and encouragement
in order to gain all relevant information

14.  Interviewing any guest or employee the investigation of the
security incident will be conducted in the presence of other
key personnel, i.e., E.A.M, Front Office Manager, Duty
Manager in case of guest involvement or HR Director in case
of employee involvement.
 All incidents / accidents that occur within or in relation to the
Hotel & Palace shall be duly investigate and reported. Further,
the Security Department shall take measures to safeguard
sensitive information, and shall retain or distribute reports and
records according to relevant procedures.

15.  Accurate reports and records permit management to indentify
the types of security incidents occurring most frequently.
When there is evidence that one type of incident occurs more
often than the others, its causes should be investigated to
determine what conditions contribute to the situation. Often,
this analysis will yield information that suggests what type of
action should be taken

16. INVESTIGATION STANDARDS
 The role of the Security Staff during investigation of incidents
is collecting information and evidence to determine the facts.
 The information collected must not, contain the Security Staff
opinion.
 Any opinion expressed by person questioned must be
identified clearly in the report as their opinions.
 The Security Officer must collect all available information
about an incident, even information that may appear irrelevant
at the time.

17. INVESTIGATION TECHNIQUE
 Conduct the investigation at the scene, if possible. In some
cases, because of the nature of the incident, it will be necessary
to conduct interviews in private.
 Prior to any statement taking or in depth inquiry, allow the
person being interviewed (i.e. the victim, witness, or suspect)
to tell the entire story without interruption.
 All question to validate information and separate opinion from
fact.
 Observe the comportment of the person interviewed.

18. RULES OF ACQUIRING INFORMATION
 Listen and observe
Allow the person to tell the entire story in his / her own words
without interruption. Then, ask question to validate the story.
 Avoid the use of leading questions
Let the person tell what happen. Do not suggest to the person
what happened

19.  Report Classification
Determine the type of report to be taking by the facts and
information. Do not be influenced by information received
before arriving at the scene. The victim might state “I have
been robbed” when actually the person room was burglarized
in his absence.

20.  Attend Scene of Incident
Check the condition of the scene yourself. Do not take
someone’s word for it. Observe the area and ask questions.
Have the witness show you how it happened and where it
occurred. If the incident involves property from guest room,
obtain permission from the guest's) to conduct a thorough
search of the room in the guest's) presence. Never treat guests
as criminals

21.  Gather Evidence
Take measurements, show positions, take photographs, and collect all
other pertinent information

22. REPORT WRITING
POLICY
1. Security report writing is the sole responsibility of the
Security Supervisor / Senior Supervisor / Manager and
should be presented in a timely manner to Head of the
Security department or his Assistance.
2. All report should be complete, based on facts and objective.
Personal opinion and views should not be included in the
report.

23. PROCEDURE
 Appropriate security reporting formats and logs should be
used.
Shift reports: Reports describing anything out of the
ordinary and all important events.
Emergency reports: Such as fire or serious injury etc.
Special Incident Report and additional investigation
report: To be filled for Accounts and management such as
theft, robbery, assault, accident etc.
Logbooks: To be in specific areas where regular events that
take place need to be recorded, such as key control, receiving,
gates etcetera…

24. In turn, the Head of Security or his Asst. should present to the
management a summary of worthy incidents / information on a
timely basis.
The most important element of any investigation is the writing
report. An extremely thorough investigation of an accident or
incident can rendered worthless by submitting an inadequate
report. The report is both an instrument for transmitting to
management immediate information about what transpired,
and is an instrument of factual record that may be submitted to
authorities, insurance company, or attorneys.

25. Eight elements of a Good Report:
1. Who was involved?
2. What happen?
3. Where did it take place?
4. When did it happen and duration?
5. How was it done?
6. Why was it done?
7. Activities or persons within the vicinity of the scene.
8. Clothing, shape or any other description.

26. IDENTIFICATION OF PERSONS
Distinguishing elements used in the description of a person
include:-
 Name of Address - Eye Color
 Race - Nationality
 Sex - Build
 Date of Birth - Complexion
 Height - Clothing (form top downwards)
 Weight - Scars, Tattoos, Deformities
 Hair Color - Facial / Hair

27. REPORT COMPILATION
 The primary purpose of an incident investigation is to
determine the facts and where possible locate or retrieve the
lost property.
 In the course of investigation a reported loss or other incident,
the Head of Security or his Asst. should direct inquires
regarding the Hotel responsibility to the management.
 Get all the facts while at the scene and arrange for a statement
to be taken from the witness. Then study and sort the material
rearrange it and rewrite it into the appropriate investigation
form

28. INCIDENTS AND OCCURRENCES THAT REQUIRE A
REPORT
The following incidents and occurrences will require a
written investigation report:-
1. All accident, illness, injury or death in the Hotel
2. Property loss / stolen / damage
3. Fire
4. Incident involving liability whether criminal or civil
5. Unusual occurrences that warrant review by management

29. When police investigation / assistance are required they should
always be notified by Senior Security personnel from the
Hotel, unless conditions permit the guest to request otherwise.
In any case, the Head of the Security department or his Asst.
should be consulted prior to reporting the case to police and in
their turn they will consult the top Management as to whether
or not the matter should be reported to the police.
All investigation reports are to be addressed to General
Manager or Hotel Manager or Department Head concerned.

30. INTOXICATION ALLEGATIONS, RESPONSE AND
REPORTS
Purpose:
To define the process of responding to reports or allegations of
an individual being intoxicated, while on property, with the
intention of providing a reasonable level of safety and security.

31. Policy
When a guest is believed to be intoxicated in the hotel; alcohol
service must be cut off. Security should request from the
server to approach the guest first and explain the policies. If
the guest becomes difficult, Security Staff as a BACKUP only
will accompany the server. With the help of the outlet manager
the guest is to be told that no more alcohol will be served.
Coffee, non-alcoholic beverages or food will be suggested.
Guest staying in the hotel will be escorted to their room.

32.  Guest not staying will be offered assistance, in calling the cab.
If the guest becomes aggressive, the manager on duty who is
accompanied by security will request that the guest leave the
premises. If an aggressive guest refuses to leave, both the
manager and Security Staff, again, will request the guest to
leave freely or under police supervision. Make every effort not
to let the guest drive. Never physically keep a guest from
driving or taking away their car keys. In case where the guest
is believed to be intoxicated, and he or she is attempting to
obtain the keys to their car, the following steps should be
followed, in succession, as required, until a resolution is
achieved

33. 1. In front of a fellow employee, as a witness security will
offer to call a taxi for the guest, to provide a safe mode of
transportation;
2. As above, but offer to assume the reasonable expense of a
taxi service, to get the guest home;
3. If the guest insists on driving, advise them that the highway
patrol/police will be notified of their license number and car
description. Repeat the offer of a complementary taxi, or a
reduce-rate room

34. If all else fails, advice the guest that there will be a delay in
retrieving the keys for the guest. At this time, contact the Police,
and ask for an officer to be dispatched. When the officer arrives,
explain the situation, and have them speak to the guest. Explain
to the guest that the officer will be present if/when they enter
their vehicle, and may take action, if the officer believes the
guest to be intoxicated.

35. Please note: the actual refusal to return a guest keys, or any
form of property, outside of specific situation related to
failures to pay and resulting compensation, is legally
considered theft. This is due to the theft statutes including a
reference to the owner being deprived of the possession or use
of owned property. Therefore; these action should be used
until the arrival of the police.

36. Procedure
1. The safety of potentially intoxicated individuals, and those
with which they might come in contact with, is the primary
concern, when responding to incidents of this nature.
2. Guests believed to be intoxicated may not be served
additional alcohol.
3. Outlet personnel, inclusive of their own management, will
attempt to resolve all such situations, prior to contacting the
security for assistance.
4. In the event were Security is called for such incidents, it is to
be limited to acting as BACKUP, or SUPPORT, for the
outlet personnel, management or other employees which have
attempted to resolve the situation

37. Reasonable action should be taken, when attempting to prevent
intoxicated person from utilizing a vehicle, to provide
alternative to the operation of said vehicle.
6. Although car keys may not be withheld from the rightful
owner, these items may be held until such time as an
appropriate Law Enforcement representative can arrive on the
scene, to document the situation, and advise the guest of
possible consequences of driving while under the influence of
alcohol.
7. Other guests well being and comfort should be of heist concern
when resolving such issues.