Security TrainingIncident Scene Preservation

Faheem

Policies and procedurePolicies and procedure

Incident Scene PreservationIncident Scene Preservation

PurposePurpose:: To identify the process of effectively investigating on-side To identify the process of effectively investigating on-side

incidents, without allowing excessive contamination of incidents, without allowing excessive contamination of evidence in the scene.evidence in the scene.

PolicyPolicy:: The crime scene is the location in which a crime occurred. It is The crime scene is the location in which a crime occurred. It is

also the central location of a crime from which subsequent also the central location of a crime from which subsequent investigative efforts will begin.investigative efforts will begin.

Physical evidence in the form of a weapon, tool marks, Physical evidence in the form of a weapon, tool marks, fingerprints, footprints, and fibers may be awaiting the fingerprints, footprints, and fibers may be awaiting the scrutiny of the investigator and the technicians. The value of scrutiny of the investigator and the technicians. The value of the crime scene rapidly deteriorates, over time. The protection the crime scene rapidly deteriorates, over time. The protection and preservation of the crime scene becomes one of the most and preservation of the crime scene becomes one of the most important responsibilities of the first officer on the scene. important responsibilities of the first officer on the scene. His/her swift arrival may prevent the destruction or His/her swift arrival may prevent the destruction or contamination of physical evidence.contamination of physical evidence.

  

Preserving the crime scene means, to keep the site of the crime Preserving the crime scene means, to keep the site of the crime in the same physical condition as the perpetrator left it. The in the same physical condition as the perpetrator left it. The security officer must prevent the deterioration of any possible security officer must prevent the deterioration of any possible clues. Touching objects, walking on stains or footprints will clues. Touching objects, walking on stains or footprints will destroy the value or reliability of otherwise good evidence. destroy the value or reliability of otherwise good evidence. Protection and preservation of the crime scene are maintained Protection and preservation of the crime scene are maintained while the investigators and technicians proceed to sketch, while the investigators and technicians proceed to sketch, photograph, and search the area.photograph, and search the area.

Unauthorized persons must be stopped from entering the area. Unauthorized persons must be stopped from entering the area. An officer guarding a crime scene must always be mindful that An officer guarding a crime scene must always be mindful that nothing within the crime scene area can be overlooked or be nothing within the crime scene area can be overlooked or be considered too insignificant to protect. So-called trivia when considered too insignificant to protect. So-called trivia when properly guarded and handled, have many times offered the properly guarded and handled, have many times offered the key to the successful conclusion of a casekey to the successful conclusion of a case..

It is also essential that the responding officer's) understand that It is also essential that the responding officer's) understand that the actual area of evidence collection is frequently much more the actual area of evidence collection is frequently much more expansive, than the original scene might suggest. A good rule expansive, than the original scene might suggest. A good rule of thumb is that the immediate area must be sealed off from of thumb is that the immediate area must be sealed off from entry, but also all routes of travel into, or out of the area also entry, but also all routes of travel into, or out of the area also sealed, up to, and including the first point at which a subject sealed, up to, and including the first point at which a subject would have to make physical contact with a hard surface, in would have to make physical contact with a hard surface, in the process of entering or leaving the areathe process of entering or leaving the area

In practice, this means the next doorway, elevator landing or In practice, this means the next doorway, elevator landing or similar area where one might have to slow, or pause, in the similar area where one might have to slow, or pause, in the process of moving from one area to another. If the incident has process of moving from one area to another. If the incident has occurred in an area adjacent to an open hallway, a reasonable occurred in an area adjacent to an open hallway, a reasonable distance of that hallway should be sealed. The first 100’ feet distance of that hallway should be sealed. The first 100’ feet would be a basic guideline, although elements of the crime, would be a basic guideline, although elements of the crime, scene or physical location may suggest a greater distance.scene or physical location may suggest a greater distance.

All persons within the area to be sealed should be directed to All persons within the area to be sealed should be directed to stay within their location, as they may be needed for stay within their location, as they may be needed for interviews. All persons to remain, must be kept out of the interviews. All persons to remain, must be kept out of the crime scene area, and directed to not make physical contact crime scene area, and directed to not make physical contact with any surface, or move about, until released by the law with any surface, or move about, until released by the law Enforcement representativesEnforcement representatives

ProcedureProcedure::1.1. Upon arrival, identify the Immediate Scene. This would Upon arrival, identify the Immediate Scene. This would

be the suspected site of the actual offence.be the suspected site of the actual offence.2.2. Seal the Immediate Scene. No persons are to enter the Seal the Immediate Scene. No persons are to enter the

Immediate Scene, with the exception of Law Immediate Scene, with the exception of Law Enforcement representatives. Enforcement representatives.

3.3. Identify the Extended Scene, defined as the possible Identify the Extended Scene, defined as the possible routes of travel, to or from, the Immediate Scene.routes of travel, to or from, the Immediate Scene.

4.4. Seal the Extended Scene, out to a reasonable distance. Seal the Extended Scene, out to a reasonable distance. Be mindful of point of contact, such as doors, elevator Be mindful of point of contact, such as doors, elevator controls or similar location, and include all such in the controls or similar location, and include all such in the extended Scene.extended Scene.

55. Identify any persons that might be within the Extended . Identify any persons that might be within the Extended Scene, and ask them to remain, so that they may be Scene, and ask them to remain, so that they may be interviewed by the law enforcement representatives.interviewed by the law enforcement representatives.

NoteNote: As an example, if it was suspected that a crime : As an example, if it was suspected that a crime has been committed in guest Room has been committed in guest Room 10141014, that room , that room and all connected rooms, would be sealed off, as the and all connected rooms, would be sealed off, as the Immediate Scene. In addition, the end of the 10Immediate Scene. In addition, the end of the 10thth floor, floor, inclusive of the nearby fire stairwell, and approximately inclusive of the nearby fire stairwell, and approximately 100’ feet of the guest floor hallway, would also be seal 100’ feet of the guest floor hallway, would also be seal off. Those persons found to be in the rooms immediately off. Those persons found to be in the rooms immediately adjoining 1014 would be asked to stay in their room, for adjoining 1014 would be asked to stay in their room, for the Law Enforcement Officials to interview.  the Law Enforcement Officials to interview.  

INCIDENT REPORT-INVESTIGATION INCIDENT REPORT-INVESTIGATION   PolicyPolicy Investigating a security incident is the Investigating a security incident is the

responsibility of Security and the HR responsibility of Security and the HR Management in case of hotel employee Management in case of hotel employee involvement.involvement.

  

PROCEDURE PROCEDURE    Security staff on duty will provide information and Security staff on duty will provide information and

description to Security Manager. This information will be description to Security Manager. This information will be provided in writing and documented in the security log.provided in writing and documented in the security log.

Most senior personnel will visit the scene of the security Most senior personnel will visit the scene of the security incident in order to obtain more leads that may help for a incident in order to obtain more leads that may help for a thorough investigation.thorough investigation.

Head of Security and his Assistance will investigate / Head of Security and his Assistance will investigate / interview those concerned using effective interview skills to interview those concerned using effective interview skills to include effective listening, rephrasing, asking open include effective listening, rephrasing, asking open questions and demonstrating sincerity and encouragement questions and demonstrating sincerity and encouragement in order to gain all relevant informationin order to gain all relevant information

Interviewing any guest or employee the investigation of the Interviewing any guest or employee the investigation of the security incident will be conducted in the presence of other security incident will be conducted in the presence of other key personnel, i.e., E.A.M, Front Office Manager, Duty key personnel, i.e., E.A.M, Front Office Manager, Duty Manager in case of guest involvement or HR Director in case Manager in case of guest involvement or HR Director in case of employee involvement.of employee involvement.

All incidents / accidents that occur within or in relation to the All incidents / accidents that occur within or in relation to the Hotel & Palace shall be duly investigate and reported. Further, Hotel & Palace shall be duly investigate and reported. Further, the Security Department shall take measures to safeguard the Security Department shall take measures to safeguard sensitive information, and shall retain or distribute reports and sensitive information, and shall retain or distribute reports and records according to relevant procedures.records according to relevant procedures.

Accurate reports and records permit management to indentify Accurate reports and records permit management to indentify the types of security incidents occurring most frequently. the types of security incidents occurring most frequently. When there is evidence that one type of incident occurs more When there is evidence that one type of incident occurs more often than the others, its causes should be investigated to often than the others, its causes should be investigated to determine what conditions contribute to the situation. Often, determine what conditions contribute to the situation. Often, this analysis will yield information that suggests what type of this analysis will yield information that suggests what type of action should be takenaction should be taken

INVESTIGATION STANDARDSINVESTIGATION STANDARDS The role of the Security Staff during investigation of incidents The role of the Security Staff during investigation of incidents

is collecting information and evidence to determine the facts.is collecting information and evidence to determine the facts. The information collected must not, contain the Security Staff The information collected must not, contain the Security Staff

opinion.opinion. Any opinion expressed by person questioned must be Any opinion expressed by person questioned must be

identified clearly in the report as their opinions.identified clearly in the report as their opinions. The Security Officer must collect all available information The Security Officer must collect all available information

about an incident, even information that may appear irrelevant about an incident, even information that may appear irrelevant at the time.at the time.

INVESTIGATION TECHNIQUE INVESTIGATION TECHNIQUE    Conduct the investigation at the scene, if possible. In some Conduct the investigation at the scene, if possible. In some

cases, because of the nature of the incident, it will be cases, because of the nature of the incident, it will be necessary to conduct interviews in private.necessary to conduct interviews in private.

Prior to any statement taking or in depth inquiry, allow the Prior to any statement taking or in depth inquiry, allow the person being interviewed (i.e. the victim, witness, or suspect) person being interviewed (i.e. the victim, witness, or suspect) to tell the entire story without interruption.to tell the entire story without interruption.

All question to validate information and separate opinion from All question to validate information and separate opinion from fact.fact.

Observe the comportment of the person interviewed.Observe the comportment of the person interviewed.  

RULES OF ACQUIRING INFORMATIONRULES OF ACQUIRING INFORMATION   Listen and observeListen and observe Allow the person to tell the entire story in his / her own words Allow the person to tell the entire story in his / her own words

without interruption. Then, ask question to validate the story.without interruption. Then, ask question to validate the story.   Avoid the use of leading questions Avoid the use of leading questions Let the person tell what happen. Do not suggest to the person Let the person tell what happen. Do not suggest to the person

what happenedwhat happened

Report ClassificationReport Classification Determine the type of report to be taking by the facts and Determine the type of report to be taking by the facts and

information. Do not be influenced by information received information. Do not be influenced by information received before arriving at the scene. The victim might state “I have before arriving at the scene. The victim might state “I have been robbed” when actually the person room was burglarized been robbed” when actually the person room was burglarized in his absence.in his absence.

Attend Scene of IncidentAttend Scene of Incident Check the condition of the scene yourself. Do not take Check the condition of the scene yourself. Do not take

someone’s word for it. Observe the area and ask questions. someone’s word for it. Observe the area and ask questions. Have the witness show you how it happened and where it Have the witness show you how it happened and where it occurred. If the incident involves property from guest room, occurred. If the incident involves property from guest room, obtain permission from the guest's) to conduct a thorough obtain permission from the guest's) to conduct a thorough search of the room in the guest's) presence. Never treat guests search of the room in the guest's) presence. Never treat guests as criminalsas criminals

Gather EvidenceGather Evidence Take measurements, show positions, take photographs, and collect all Take measurements, show positions, take photographs, and collect all

other pertinent informationother pertinent information

REPORT WRITING REPORT WRITING   POLICY POLICY   1.1. Security report writing is the sole responsibility of the Security report writing is the sole responsibility of the

Security Supervisor / Senior Supervisor / Manager and Security Supervisor / Senior Supervisor / Manager and should be presented in a timely manner to Head of the should be presented in a timely manner to Head of the Security department or his Assistance.Security department or his Assistance.

2.2. All report should be complete, based on facts and objective. All report should be complete, based on facts and objective. Personal opinion and views should not be included in the Personal opinion and views should not be included in the report.report.

PROCEDURE PROCEDURE  Appropriate security reporting formats and logs should be used. Appropriate security reporting formats and logs should be used.  Shift reports: Shift reports: Reports describing anythingReports describing anything out of the ordinary out of the ordinary

and all important events.and all important events. Emergency reports:Emergency reports: Such as fire or serious injury etc. Such as fire or serious injury etc. Special Incident Report and additional investigation Special Incident Report and additional investigation

report:report: To be filled for Accounts and management such as To be filled for Accounts and management such as theft, robbery, assault, accident etc.theft, robbery, assault, accident etc.

Logbooks: Logbooks: To be in specific areas where regular events that To be in specific areas where regular events that take place need to be recorded, such as key control, receiving, take place need to be recorded, such as key control, receiving, gates etcetera…gates etcetera…

In turn, the Head of Security or his Asst. should present to the In turn, the Head of Security or his Asst. should present to the management a summary of worthy incidents / information on management a summary of worthy incidents / information on a timely basis.a timely basis.

The most important element of any investigation is the writing The most important element of any investigation is the writing report. An extremely thorough investigation of an accident or report. An extremely thorough investigation of an accident or incident can rendered worthless by submitting an inadequate incident can rendered worthless by submitting an inadequate report. The report is both an instrument for transmitting to report. The report is both an instrument for transmitting to management immediate information about what transpired, management immediate information about what transpired, and is an instrument of factual record that may be submitted to and is an instrument of factual record that may be submitted to authorities, insurance company, or attorneys.authorities, insurance company, or attorneys.

Eight elements of a Good Report:Eight elements of a Good Report:

1.1. Who was involved?Who was involved?2.2. What happen?What happen?3.3. Where did it take place?Where did it take place?4.4. When did it happen and duration?When did it happen and duration?5.5. How was it done?How was it done?6.6. Why was it done?Why was it done?7.7. Activities or persons within the vicinity of the scene.Activities or persons within the vicinity of the scene.8.8. Clothing, shape or any other description.Clothing, shape or any other description.  

IDENTIFICATION OF PERSONSIDENTIFICATION OF PERSONS   Distinguishing elements used in the description of a person Distinguishing elements used in the description of a person

include:- include:-  Name of Address - Eye ColorName of Address - Eye Color Race - Nationality Race - Nationality Sex - BuildSex - Build Date of Birth - ComplexionDate of Birth - Complexion Height - Clothing (form top downwards)Height - Clothing (form top downwards) Weight - Scars, Tattoos, DeformitiesWeight - Scars, Tattoos, Deformities Hair Color - Facial / HairHair Color - Facial / Hair

REPORT COMPILATION REPORT COMPILATION  The primary purpose of an incident investigation is to The primary purpose of an incident investigation is to

determine the facts and where possible locate or retrieve the determine the facts and where possible locate or retrieve the lost property.lost property.

In the course of investigation a reported loss or other incident, In the course of investigation a reported loss or other incident, the Head of Security or his Asst. should direct inquires the Head of Security or his Asst. should direct inquires regarding the Hotel responsibility to the management.regarding the Hotel responsibility to the management.

Get all the facts while at the scene and arrange for a statement Get all the facts while at the scene and arrange for a statement to be taken from the witness. Then study and sort the material to be taken from the witness. Then study and sort the material rearrange it and rewrite it into the appropriate investigation rearrange it and rewrite it into the appropriate investigation formform

INCIDENTS AND OCCURRENCES THAT REQUIRE A INCIDENTS AND OCCURRENCES THAT REQUIRE A REPORT REPORT

    The following incidents and occurrences will require a The following incidents and occurrences will require a written investigation report:-written investigation report:-

1.1. All accident, illness, injury or death in the HotelAll accident, illness, injury or death in the Hotel2.2. Property loss / stolen / damageProperty loss / stolen / damage3.3. FireFire4.4. Incident involving liability whether criminal or civil Incident involving liability whether criminal or civil 5.5. Unusual occurrences that warrant review by managementUnusual occurrences that warrant review by management

When police investigation / assistance are required they should When police investigation / assistance are required they should always be notified by Senior Security personnel from the always be notified by Senior Security personnel from the Hotel, unless conditions permit the guest to request otherwise. Hotel, unless conditions permit the guest to request otherwise. In any case, the Head of the Security department or his Asst. In any case, the Head of the Security department or his Asst. should be consulted prior to reporting the case to police and in should be consulted prior to reporting the case to police and in their turn they will consult the top Management as to whether their turn they will consult the top Management as to whether or not the matter should be reported to the police.or not the matter should be reported to the police.

All investigation reports are to be addressed to General All investigation reports are to be addressed to General Manager or Hotel Manager or Department Head concerned.Manager or Hotel Manager or Department Head concerned.

INTOXICATION ALLEGATIONS, RESPONSE AND INTOXICATION ALLEGATIONS, RESPONSE AND REPORTS REPORTS

  Purpose:Purpose:    To define the process of responding to reports or allegations of To define the process of responding to reports or allegations of

an individual being intoxicated, while on property, with the an individual being intoxicated, while on property, with the intention of providing a reasonable level of safety and intention of providing a reasonable level of safety and security.security.

PolicyPolicy    When a guest is believed to be intoxicated in the hotel; alcohol When a guest is believed to be intoxicated in the hotel; alcohol

service must be cut off. Security should request from the service must be cut off. Security should request from the server to approach the guest first and explain the policies. If server to approach the guest first and explain the policies. If the guest becomes difficult, Security Staff as a the guest becomes difficult, Security Staff as a BACKUPBACKUP only only will accompany the server. With the help of the outlet will accompany the server. With the help of the outlet manager the guest is to be told that no more alcohol will be manager the guest is to be told that no more alcohol will be served. Coffee, non-alcoholic beverages or food will be served. Coffee, non-alcoholic beverages or food will be suggested. Guest staying in the hotel will be escorted to their suggested. Guest staying in the hotel will be escorted to their room. room.

Guest not staying will be offered assistance, in calling the cab. Guest not staying will be offered assistance, in calling the cab. If the guest becomes aggressive, the manager on duty who is If the guest becomes aggressive, the manager on duty who is accompanied by security will request that the guest leave the accompanied by security will request that the guest leave the premises. If an aggressive guest refuses to leave, both the premises. If an aggressive guest refuses to leave, both the manager and Security Staff, again, will request the guest to manager and Security Staff, again, will request the guest to leave freely or under police supervision. Make every effort not leave freely or under police supervision. Make every effort not to let the guest drive. Never physically keep a guest from to let the guest drive. Never physically keep a guest from driving or taking away their car keys. In case where the guest driving or taking away their car keys. In case where the guest is believed to be intoxicated, and he or she is attempting to is believed to be intoxicated, and he or she is attempting to obtain the keys to their car, the following steps should be obtain the keys to their car, the following steps should be followed, in succession, as required, until a resolution is followed, in succession, as required, until a resolution is achievedachieved

1.1. In front of a fellow employee, as a witness security will In front of a fellow employee, as a witness security will offer to call a taxi for the guest, to provide a safe mode of offer to call a taxi for the guest, to provide a safe mode of transportation;transportation;

2.2. As above, but offer to assume the reasonable expense of a As above, but offer to assume the reasonable expense of a taxi service, to get the guest home;taxi service, to get the guest home;

3.3. If the guest insists on driving, advise them that the highway If the guest insists on driving, advise them that the highway patrol/police will be notified of their license number and car patrol/police will be notified of their license number and car description. Repeat the offer of a complementary taxi, or a description. Repeat the offer of a complementary taxi, or a reduce-rate roomreduce-rate room

If all else fails, advice the guest that there will be a delay in If all else fails, advice the guest that there will be a delay in retrieving the keys for the guest. At this time, contact the retrieving the keys for the guest. At this time, contact the Police, and ask for an officer to be dispatched. When the officer Police, and ask for an officer to be dispatched. When the officer arrives, explain the situation, and have them speak to the guest. arrives, explain the situation, and have them speak to the guest. Explain to the guest that the officer will be present if/when they Explain to the guest that the officer will be present if/when they enter their vehicle, and may take action, if the officer believes enter their vehicle, and may take action, if the officer believes

the guest to be intoxicated.the guest to be intoxicated.

Please note: Please note: the actual refusal to return a guest keys, or any the actual refusal to return a guest keys, or any form of property, outside of specific situation related to form of property, outside of specific situation related to failures to pay and resulting compensation, is legally failures to pay and resulting compensation, is legally considered theft. This is due to the theft statutes including a considered theft. This is due to the theft statutes including a reference to the owner being deprived of the possession or use reference to the owner being deprived of the possession or use of owned property. Therefore; these action should be used of owned property. Therefore; these action should be used until the arrival of the police.until the arrival of the police.

Procedure Procedure   1.1. The safety of potentially intoxicated individuals, and those with The safety of potentially intoxicated individuals, and those with

which they might come in contact with, is the primary concern, which they might come in contact with, is the primary concern, when responding to incidents of this nature.when responding to incidents of this nature.

2.2. Guests believed to be intoxicated may not be served additional Guests believed to be intoxicated may not be served additional alcohol.alcohol.

3.3. Outlet personnel, inclusive of their own management, will Outlet personnel, inclusive of their own management, will attempt to resolve all such situations, prior to contacting the attempt to resolve all such situations, prior to contacting the security for assistance.security for assistance.

4.4. In the event were Security is called for such incidents, it is to be In the event were Security is called for such incidents, it is to be limited to acting as limited to acting as BACKUPBACKUP, or , or SUPPORTSUPPORT, for the outlet , for the outlet personnel, management or other employees which have personnel, management or other employees which have attempted to resolve the situationattempted to resolve the situation

Reasonable action should be taken, when attempting to prevent Reasonable action should be taken, when attempting to prevent intoxicated person from utilizing a vehicle, to provide intoxicated person from utilizing a vehicle, to provide alternative to the operation of said vehicle.alternative to the operation of said vehicle.

6. Although car keys may not be withheld from the rightful 6. Although car keys may not be withheld from the rightful owner, these items may be held until such time as an owner, these items may be held until such time as an appropriate Law Enforcement representative can arrive on the appropriate Law Enforcement representative can arrive on the scene, to document the situation, and advise the guest of scene, to document the situation, and advise the guest of possible consequences of driving while under the influence of possible consequences of driving while under the influence of alcohol.alcohol.

7. Other guests well being and comfort should be of heist concern 7. Other guests well being and comfort should be of heist concern when resolving such issues.when resolving such issues.