Security Training Incident Investigation And Report Writing.Ppt
Security Training Incident Scene Preservation Faheem
Policies and procedure Incident Scene Preservation Purpose: To identify the process of effectively investigating on-side incidents, without allowing excessive contamination of evidence in the scene. Policy: The crime scene is the location in which a crime occurred. It is also the central location of a crime from which subsequent investigative efforts will begin.
Physical evidence in the form of a weapon, tool marks, fingerprints, footprints, and fibers may be awaiting the scrutiny of the investigator and the technicians. The value of the crime scene rapidly deteriorates, over time. The protection and preservation of the crime scene becomes one of the most important responsibilities of the first officer on the scene. His/her swift arrival may prevent the destruction or contamination of physical evidence.
Preserving the crime scene means, to keep the site of the crime in the same physical condition as the perpetrator left it. The security officer must prevent the deterioration of any possible clues. Touching objects, walking on stains or footprints will destroy the value or reliability of otherwise good evidence. Protection and preservation of the crime scene are maintained while the investigators and technicians proceed to sketch, photograph, and search the area.
Unauthorized persons must be stopped from entering the area. An officer guarding a crime scene must always be mindful that nothing within the crime scene area can be overlooked or be considered too insignificant to protect. So-called trivia when properly guarded and handled, have many times offered the key to the successful conclusion of a case.
It is also essential that the responding officers) understand that the actual area of evidence collection is frequently much more expansive, than the original scene might suggest. A good rule of thumb is that the immediate area must be sealed off from entry, but also all routes of travel into, or out of the area also sealed, up to, and including the first point at which a subject would have to make physical contact with a hard surface, in the process of entering or leaving the area
In practice, this means the next doorway, elevator landing or similar area where one might have to slow, or pause, in the process of moving from one area to another. If the incident has occurred in an area adjacent to an open hallway, a reasonable distance of that hallway should be sealed. The first 100’ feet would be a basic guideline, although elements of the crime, scene or physical location may suggest a greater distance.
All persons within the area to be sealed should be directed to stay within their location, as they may be needed for interviews. All persons to remain, must be kept out of the crime scene area, and directed to not make physical contact with any surface, or move about, until released by the law Enforcement representatives
Procedure:1. Upon arrival, identify the Immediate Scene. This would be the suspected site of the actual offence.2. Seal the Immediate Scene. No persons are to enter the Immediate Scene, with the exception of Law Enforcement representatives.3. Identify the Extended Scene, defined as the possible routes of travel, to or from, the Immediate Scene.4. Seal the Extended Scene, out to a reasonable distance. Be mindful of point of contact, such as doors, elevator controls or similar location, and include all such in the extended Scene.
5. Identify any persons that might be within the Extended Scene, and ask them to remain, so that they may be interviewed by the law enforcement representatives. Note: As an example, if it was suspected that a crime has been committed in guest Room 1014, that room and all connected rooms, would be sealed off, as the Immediate Scene. In addition, the end of the 10th floor, inclusive of the nearby fire stairwell, and approximately 100’ feet of the guest floor hallway, would also be seal off. Those persons found to be in the rooms immediately adjoining 1014 would be asked to stay in their room, for the Law Enforcement Officials to interview.
INCIDENT REPORT- INVESTIGATIONPolicy Investigating a security incident is the responsibility of Security and the HR Management in case of hotel employee involvement.
PROCEDURE Security staff on duty will provide information and description to Security Manager. This information will be provided in writing and documented in the security log. Most senior personnel will visit the scene of the security incident in order to obtain more leads that may help for a thorough investigation. Head of Security and his Assistance will investigate / interview those concerned using effective interview skills to include effective listening, rephrasing, asking open questions and demonstrating sincerity and encouragement in order to gain all relevant information
Interviewing any guest or employee the investigation of the security incident will be conducted in the presence of other key personnel, i.e., E.A.M, Front Office Manager, Duty Manager in case of guest involvement or HR Director in case of employee involvement. All incidents / accidents that occur within or in relation to the Hotel & Palace shall be duly investigate and reported. Further, the Security Department shall take measures to safeguard sensitive information, and shall retain or distribute reports and records according to relevant procedures.
Accurate reports and records permit management to indentify the types of security incidents occurring most frequently. When there is evidence that one type of incident occurs more often than the others, its causes should be investigated to determine what conditions contribute to the situation. Often, this analysis will yield information that suggests what type of action should be taken
INVESTIGATION STANDARDS The role of the Security Staff during investigation of incidents is collecting information and evidence to determine the facts. The information collected must not, contain the Security Staff opinion. Any opinion expressed by person questioned must be identified clearly in the report as their opinions. The Security Officer must collect all available information about an incident, even information that may appear irrelevant at the time.
INVESTIGATION TECHNIQUE Conduct the investigation at the scene, if possible. In some cases, because of the nature of the incident, it will be necessary to conduct interviews in private. Prior to any statement taking or in depth inquiry, allow the person being interviewed (i.e. the victim, witness, or suspect) to tell the entire story without interruption. All question to validate information and separate opinion from fact. Observe the comportment of the person interviewed.
RULES OF ACQUIRING INFORMATION Listen and observe Allow the person to tell the entire story in his / her own words without interruption. Then, ask question to validate the story. Avoid the use of leading questions Let the person tell what happen. Do not suggest to the person what happened
Report Classification Determine the type of report to be taking by the facts and information. Do not be influenced by information received before arriving at the scene. The victim might state “I have been robbed” when actually the person room was burglarized in his absence.
Attend Scene of Incident Check the condition of the scene yourself. Do not take someone’s word for it. Observe the area and ask questions. Have the witness show you how it happened and where it occurred. If the incident involves property from guest room, obtain permission from the guests) to conduct a thorough search of the room in the guests) presence. Never treat guests as criminals
Gather Evidence Take measurements, show positions, take photographs, and collect all other pertinent information
REPORT WRITINGPOLICY1. Security report writing is the sole responsibility of the Security Supervisor / Senior Supervisor / Manager and should be presented in a timely manner to Head of the Security department or his Assistance.2. All report should be complete, based on facts and objective. Personal opinion and views should not be included in the report.
PROCEDURE Appropriate security reporting formats and logs should be used. Shift reports: Reports describing anything out of the ordinary and all important events. Emergency reports: Such as fire or serious injury etc. Special Incident Report and additional investigation report: To be filled for Accounts and management such as theft, robbery, assault, accident etc. Logbooks: To be in specific areas where regular events that take place need to be recorded, such as key control, receiving, gates etcetera…
In turn, the Head of Security or his Asst. should present to themanagement a summary of worthy incidents / information on atimely basis.The most important element of any investigation is the writingreport. An extremely thorough investigation of an accident orincident can rendered worthless by submitting an inadequatereport. The report is both an instrument for transmitting tomanagement immediate information about what transpired,and is an instrument of factual record that may be submitted toauthorities, insurance company, or attorneys.
Eight elements of a Good Report:1. Who was involved?2. What happen?3. Where did it take place?4. When did it happen and duration?5. How was it done?6. Why was it done?7. Activities or persons within the vicinity of the scene.8. Clothing, shape or any other description.
IDENTIFICATION OF PERSONS Distinguishing elements used in the description of a person include:- Name of Address - Eye Color Race - Nationality Sex - Build Date of Birth - Complexion Height - Clothing (form top downwards) Weight - Scars, Tattoos, Deformities Hair Color - Facial / Hair
REPORT COMPILATION The primary purpose of an incident investigation is to determine the facts and where possible locate or retrieve the lost property. In the course of investigation a reported loss or other incident, the Head of Security or his Asst. should direct inquires regarding the Hotel responsibility to the management. Get all the facts while at the scene and arrange for a statement to be taken from the witness. Then study and sort the material rearrange it and rewrite it into the appropriate investigation form
INCIDENTS AND OCCURRENCES THAT REQUIRE A REPORT The following incidents and occurrences will require a written investigation report:-1. All accident, illness, injury or death in the Hotel2. Property loss / stolen / damage3. Fire4. Incident involving liability whether criminal or civil5. Unusual occurrences that warrant review by management
When police investigation / assistance are required they shouldalways be notified by Senior Security personnel from theHotel, unless conditions permit the guest to request otherwise.In any case, the Head of the Security department or his Asst.should be consulted prior to reporting the case to police and intheir turn they will consult the top Management as to whetheror not the matter should be reported to the police.All investigation reports are to be addressed to GeneralManager or Hotel Manager or Department Head concerned.
INTOXICATION ALLEGATIONS, RESPONSE AND REPORTSPurpose: To define the process of responding to reports or allegations of an individual being intoxicated, while on property, with the intention of providing a reasonable level of safety and security.
Policy When a guest is believed to be intoxicated in the hotel; alcohol service must be cut off. Security should request from the server to approach the guest first and explain the policies. If the guest becomes difficult, Security Staff as a BACKUP only will accompany the server. With the help of the outlet manager the guest is to be told that no more alcohol will be served. Coffee, non-alcoholic beverages or food will be suggested. Guest staying in the hotel will be escorted to their room.
Guest not staying will be offered assistance, in calling the cab. If the guest becomes aggressive, the manager on duty who is accompanied by security will request that the guest leave the premises. If an aggressive guest refuses to leave, both the manager and Security Staff, again, will request the guest to leave freely or under police supervision. Make every effort not to let the guest drive. Never physically keep a guest from driving or taking away their car keys. In case where the guest is believed to be intoxicated, and he or she is attempting to obtain the keys to their car, the following steps should be followed, in succession, as required, until a resolution is achieved
1. In front of a fellow employee, as a witness security will offer to call a taxi for the guest, to provide a safe mode of transportation;2. As above, but offer to assume the reasonable expense of a taxi service, to get the guest home;3. If the guest insists on driving, advise them that the highway patrol/police will be notified of their license number and car description. Repeat the offer of a complementary taxi, or a reduce-rate room
If all else fails, advice the guest that there will be a delay inretrieving the keys for the guest. At this time, contact the Police,and ask for an officer to be dispatched. When the officer arrives,explain the situation, and have them speak to the guest. Explainto the guest that the officer will be present if/when they entertheir vehicle, and may take action, if the officer believes theguest to be intoxicated.
Please note: the actual refusal to return a guest keys, or anyform of property, outside of specific situation related tofailures to pay and resulting compensation, is legallyconsidered theft. This is due to the theft statutes including areference to the owner being deprived of the possession or useof owned property. Therefore; these action should be useduntil the arrival of the police.
Procedure1. The safety of potentially intoxicated individuals, and those with which they might come in contact with, is the primary concern, when responding to incidents of this nature.2. Guests believed to be intoxicated may not be served additional alcohol.3. Outlet personnel, inclusive of their own management, will attempt to resolve all such situations, prior to contacting the security for assistance.4. In the event were Security is called for such incidents, it is to be limited to acting as BACKUP, or SUPPORT, for the outlet personnel, management or other employees which have attempted to resolve the situation
Reasonable action should be taken, when attempting to prevent intoxicated person from utilizing a vehicle, to provide alternative to the operation of said vehicle.6. Although car keys may not be withheld from the rightful owner, these items may be held until such time as an appropriate Law Enforcement representative can arrive on the scene, to document the situation, and advise the guest of possible consequences of driving while under the influence of alcohol.7. Other guests well being and comfort should be of heist concern when resolving such issues.