Documentation and Evidence Flashcards

When documenting an incident in a notebook, which of the following is a critical rule to ensure its admissibility and credibility in court?

Answer: Drawing a single line through any errors and initialing the change.

To maintain the integrity of a security professional's notebook as a legal document, all entries must be permanent and unaltered. If an error is made, the correct procedure is to cross it out with a single line so it remains legible, and then initial the change to show who made the correction and when. Removing pages, leaving blank spaces, or using erasable ink can compromise the notebook's credibility and suggest that the notes have been tampered with.

A security professional is writing an incident report about a theft. Which of the following statements is the most appropriate and objective for the report?

Answer: I observed an individual conceal two items under their jacket and exit without paying.

Incident reports must be based on objective, factual observations. Stating exactly what was seen ('conceal two items under their jacket and exit without paying') is a factual account. The other options include subjective opinions, assumptions about the person's motives or character ('looked guilty', 'probably a drug user', 'appeared nervous'), which are inappropriate for a professional report and can undermine its credibility.

Which of the following best describes the primary purpose of maintaining a 'chain of custody' for a piece of evidence found at a scene?

Answer: To provide a chronological record of everyone who has handled the evidence.

The chain of custody is a legal principle that requires the chronological documentation of the seizure, custody, control, transfer, analysis, and disposition of evidence. Its primary purpose is to prove that the evidence has not been tampered with, altered, or substituted from the moment it was collected to the moment it is presented in court, thus maintaining its integrity.

While on patrol, you witness a verbal altercation that does not escalate physically and resolves on its own. According to ABST standards for documentation, what is the correct course of action?

Answer: Make a detailed entry in your notebook about the observation.

Security professionals are required to document their findings, observations, and actions taken during their shift. Even incidents that resolve themselves should be noted. This creates a complete record of activities on the property, which can be useful for identifying patterns, demonstrating due diligence, or recalling details for a future investigation.

When taking a statement from a witness after an incident, what is the most critical piece of information to obtain and record, besides their account of the event?

Answer: Their full name and contact information.

While the witness's account is crucial, obtaining their full name and contact information is essential for any follow-up that may be required by supervisors, clients, or law enforcement. Without this information, the statement may be of limited use as it cannot be properly verified or followed up on.

Which of the '5 W's and H' is being addressed when a security professional documents the 'actions taken' in an incident report?

Answer: How

The 'actions taken' section of an incident report explains 'How' the security professional responded to the incident. It details the sequence of events and steps taken to manage, control, or resolve the situation, such as notifying supervisors, contacting emergency services, or preserving the scene. 'What' describes the incident itself, 'Who' identifies the people involved, and 'Why' often involves speculation which should be avoided.