Last Updated: January 21, 2026
TL;DR: Security Guard Incident Report Essentials
- What it is: A factual, chronological record of a security/safety/property incident filed by a security officer or guard.
- When to write it: Immediately after any incident affecting security, safety, property, or personnel (theft, trespassing, injury, suspicious activity, emergency response, property damage).
- What to include: Report number, date/time, location, incident type, people involved, witnesses, suspect description, actions taken, evidence, and follow-up steps.
- Why it matters: Incident reports support investigations, client communication, insurance claims, legal compliance (OSHA for workplace injuries), and operational accountability.
- Key principle: Document observable facts only—no assumptions, opinions, or conclusions. Stick to the timeline and evidence.
What Is a Security Guard Incident Report?
A security guard incident report is a formal, factual record of any security, safety, property, or personnel event that occurs during a guard’s shift or on a client’s premises. It serves as an official written account designed to:
- Inform supervisors and clients of what happened, when, and what action was taken.
- Support investigations by law enforcement, internal teams, or insurance carriers.
- Protect the legal interests of the guard, the security company, and the client.
- Ensure compliance with workplace safety regulations (OSHA) if injuries or hazardous incidents are involved.
- Create an audit trail for operational accountability and performance review.
Unlike casual notes or verbal updates, an incident report is a formal document that may be used as evidence or in legal proceedings. Therefore, accuracy, objectivity, and completeness are non-negotiable.
When to Write an Incident Report
Write an incident report immediately after (or during, if safe to do so) any of the following:
Criminal or Suspicious Incidents
- Theft or attempted theft
- Trespassing or unauthorized access
- Assault, threat, or confrontation
- Vandalism or property damage
- Suspicious activity or loitering
- Discovery of contraband or hazardous items
Safety and Health Incidents
- Employee or visitor injury (no matter how minor)
- Medical emergency
- Fire, hazardous material spill, or environmental hazard
- Near-miss or potential safety risk
- Accident or collision (vehicle or pedestrian)
Operational Incidents
- Equipment failure or security system malfunction
- Unauthorized entry or breach of access control
- Loss or misplacement of sensitive materials
- Unusual or anomalous activity
- Client complaint or concern raised during the shift
Regulatory/Compliance Incidents
- Workplace injury requiring first aid or medical attention (even if employee declines treatment)
- Fatality
- Hospitalization or amputation
- Loss of eye or other serious injury
- Any event potentially triggering OSHA reporting obligations
What to Include in a Security Guard Incident Report
Use this 8-element checklist (the “Eight Absolutes”) to ensure completeness:
1. Report Identification
- Report number (assigned sequentially or by management system)
- Guard/officer name and ID
- Date and time of report (when written, not just when the incident occurred)
- Company/agency name and contact information
2. Incident Identification
- Incident date and time (exact time the incident began; use 24-hour format for clarity)
- Location (building, floor, room, address, GPS coordinates if applicable)
- Incident type (e.g., theft, injury, trespassing, medical emergency, equipment failure, suspicious activity)
- Brief incident title/summary (1–2 sentences)
3. People Involved
- Involved party/suspect description (name if known; physical description, clothing, vehicle if not)
- Age/approximate age
- Height, build, distinguishing features (tattoos, scars, accent)
- Clothing description
- Vehicle description (make, model, color, license plate if visible)
- Employee(s) affected (if an injury or incident involves staff)
- Client/property manager contact (if the incident occurred on a client site)
4. Witness Information
- Witness names and contact details (if willing to provide)
- Witness statements (summary of what each witness observed; use quotation marks for direct quotes)
- Witness role (employee, visitor, bystander, customer)
5. Incident Timeline and Description
- Chronological narrative (what happened, in order, as observed)
- Start with what you were doing before the incident.
- Document the sequence of events with timestamps if possible.
- Describe observable facts: actions, words, physical evidence.
- Avoid assumptions, opinions, or conclusions (e.g., don’t write “the suspect was clearly nervous”; write “the suspect’s hands were trembling” or “the suspect avoided eye contact”)
- Context (any unusual conditions, weather, lighting, or noise level that affected the incident)
6. Evidence and Documentation
- Physical evidence (items collected, photographed, logged into chain of custody)
- Photographs or video (CCTV footage, photos of property damage, injury, or suspect)
- Documents (emails, messages, previous reports related to the incident)
- Chain of custody (who handled the evidence, when, and where it is now stored)
7. Actions Taken
- Immediate response (what the guard did on scene: first aid, securing the area, contacting authorities, notifying management)
- Notifications (who was contacted, when, and how)
- Supervisor or manager
- Law enforcement (police, fire, EMS)
- Client or property owner
- Medical personnel
- Escalation decisions (if the incident required emergency response, client escalation, or specialized follow-up)
- Scene preservation (steps taken to protect evidence or secure the area)
8. Follow-Up and Recommendations
- Disposition (outcome of the incident: resolved, under investigation, referred to law enforcement, claim filed, etc.)
- Recommended next steps (additional patrols, security enhancements, training, disciplinary action if applicable)
- Guard signature and date
- Supervisor review and sign-off (if required by policy)
Conditional: Reporting Workplace Injuries (OSHA Compliance)
If the incident involves a workplace injury to an employee or contractor on your client’s premises, capture these minimum data points to support compliance reporting:
- Affected person(s): Full name, job title, department
- Injury description: Type of injury (laceration, fracture, burn, etc.) and body part affected
- Cause: What action or condition caused the injury (e.g., “cut hand on broken glass,” “slipped on wet floor”)
- Time and location: Exact time of injury and location within the facility
- Treatment: First aid provided on-site, or medical facility visited
- Witness(es): Who saw the injury or was present
OSHA Escalation Timing (Compliance Note)
If the incident involves:
- Fatality: Notify OSHA within 8 hours
- Hospitalization, amputation, or loss of eye: Notify OSHA **within 24 hours
Ensure your report captures the injury type and severity clearly so management can meet these deadlines.
Step-by-Step Guide: How to Write a Security Guard Incident Report
Step 1: Secure the Scene and Ensure Safety
Before writing, ensure the incident is contained, no one is in immediate danger, and appropriate authorities (police, EMS, supervisor) have been contacted if needed.
Step 2: Gather Information While Memory Is Fresh
- Note times, descriptions, and the sequence of events immediately (within minutes, if possible).
- Collect witness names and contact details before they leave.
- Take photographs of the scene, damage, or evidence (if safe and permitted by policy).
- Preserve evidence; document what was moved, by whom, and when (chain of custody).
Step 3: Review Incident Type and Choose Template Format
Determine if the incident is criminal, medical, operational, or compliance-related, and select the appropriate report template or form.
Step 4: Fill in Identification and Incident Information
Complete the report header: date, time, location, guard name, report number, and incident type.
Step 5: Write the Chronological Narrative
Start from the beginning of your shift or the moment you became aware of the incident. Write in the past tense and use the active voice. Describe what you observed, not what you inferred.
Good example
- “At 14:30, I observed a male subject, approximately 5’10”, wearing a black hoodie and jeans, attempting to open the locked east entrance. When I approached, he quickly turned and walked toward the parking lot. I radioed the incident and followed at a safe distance. The subject entered a silver Honda Civic (license plate partially visible as ABC-12XX) and drove north on Main Street. I described it to the local police via phone.”
Poor example (avoid):
- “A suspicious guy tried to break in. He was nervous and ran away. He looked like he was up to no good.”
Step 6: Document All People, Witnesses, and Evidence
List names, descriptions, and contact information. Note what evidence was collected and where it is stored.
Step 7: Describe Your Response and Notifications
Clearly state what you did, who you contacted, and when. Include supervisor and client notifications.
Step 8: Write Recommendations and Next Steps
What should happen next? Should there be additional patrols, a police investigation, or client follow-up?
Step 9: Review and Sign
Proofread for accuracy, spelling, and clarity. Sign and date the report. Ensure your supervisor reviews and approves it.
Free Security Guard Incident Report Template
═══════════════════════════════════════════════════════════════
SECURITY INCIDENT REPORT
═══════════════════════════════════════════════════════════════
REPORT IDENTIFICATION
─────────────────────
Report Number: ________________ Date Written: _______________
Guard Name: _______________________________ ID: ________________
Company: ____________________________________ License #: ________
Supervisor Name: _______________________________
INCIDENT IDENTIFICATION
─────────────────────────
Incident Date: _______________ Time: _________ (24-hour format)
Location (Address/Site): ___________________________________________
Incident Type (check one):
☐ Theft/Attempted Theft ☐ Injury/Medical Emergency
☐ Trespassing ☐ Vandalism/Property Damage
☐ Suspicious Activity ☐ Security System Failure
☐ Assault/Threat ☐ Other: ___________________
Brief Incident Title (1–2 sentences):
________________________________________________________________
________________________________________________________________
PEOPLE INVOLVED
─────────────────
Suspect/Involved Party:
Name (if known): ________________ Age/DOB: ________________
Physical Description: Height: _____ Build: _____
Distinguishing Features: ___________________________________________
Clothing: __________________________________________________________
Vehicle (if applicable): Make/Model: ______________ Color: _______
License Plate: ________________
Employee(s) Affected:
Name & Position: _______________________________
Nature of Involvement: _______________________________
WITNESS INFORMATION
──────────────────
Witness 1:
Name: ___________________________ Phone: _____________________
Position/Role: ________________ Email: _____________________
Observed: ___________________________________________________________
Witness 2:
Name: ___________________________ Phone: _____________________
Position/Role: ________________ Email: _____________________
Observed: ___________________________________________________________
INCIDENT NARRATIVE (Chronological Timeline)
────────────────────────────────────────────
Write exactly what you observed, in sequence, with times:
________________________________________________________________
________________________________________________________________
________________________________________________________________
________________________________________________________________
________________________________________________________________
EVIDENCE & DOCUMENTATION
────────────────────────
Physical Evidence Collected: ________________________________________
Photographs Taken: ☐ Yes ☐ No Video/CCTV: ☐ Yes ☐ No
Chain of Custody (who handled evidence, when):
________________________________________________________________
ACTIONS TAKEN
─────────────
Immediate Response (first aid, securing area, etc.):
________________________________________________________________
Notifications (check and fill in):
☐ Supervisor – Name: ____________________ Time: ______________
☐ Police – Dispatch Confirmation #: ______________ Time: _____
☐ EMS/Medical – Facility: __________________ Time: _______
☐ Client/Property Manager – Name: ________________ Time: _____
☐ Other: _______________________________________________________________
Scene Preservation / Evidence Protection:
________________________________________________________________
FOLLOW-UP & RECOMMENDATIONS
────────────────────────────
Incident Disposition:
☐ Resolved ☐ Under Investigation ☐ Referred to Police
☐ Insurance Claim Filed ☐ Other: _______________
Recommended Next Steps:
________________________________________________________________
Guard Signature: ______________________________ Date: ___________
SUPERVISOR REVIEW & APPROVAL
────────────────────────────
Reviewed By: ________________________________ Date: ___________
Supervisor Signature: ______________________________
Common Mistakes to Avoid in Incident Reports
Opinion and Assumption
- Mistake: “The suspect was clearly up to no good.”
- Fix: “The suspect avoided eye contact and walked quickly toward the exit.”
Vague Descriptions
- Mistake: “A large man came in.”
- Fix: “A male, approximately 6’2″, athletic build, wearing a black jacket and baseball cap.”
Incomplete Timeline
- Mistake: “Someone broke the window sometime today.”
- Fix: “At 14:30, I observed the east-side window broken. Based on CCTV review, the break occurred between 13:45 and 14:00.”
Omitting Evidence
- Mistake: No mention of photographs, video, or physical evidence.
- Fix: “I photographed the scene at 15:00 and secured the broken glass as evidence. CCTV footage was saved to the server. Chain of custody documented.”
Lack of Specificity on Notifications
- Mistake: “I called the police.”
- Fix: “I contacted Portland Police Department dispatch at 14:32. Confirmation #: PD-2026-12345. Officer Sarah Martinez arrived on-scene at 14:50.”
Handwriting/Illegibility
- Mistake: Sloppy, hard-to-read handwriting (if using paper forms).
- Fix: Type reports or write clearly in block letters. Avoid abbreviations unless universally understood.
Missing Guard or Supervisor Signature
- Mistake: Report completed but unsigned.
- Fix: Always sign and date the report. Ensure supervisor reviews and approves.
Delayed Reporting
- Mistake: Writing the report days after the incident.
- Fix: Complete the report immediately or within 24 hours while the details are fresh.
Best Practices for Professional Incident Reporting
Write Objectively and Factually
Describe what you saw, heard, and did—not what you think, assume, or infer.
Use Consistent Formatting and Terminology
Define incident types in advance (e.g., “theft,” “trespassing,” “medical emergency”). Use them consistently across all reports.
Include Timestamps
Use 24-hour format (14:30 instead of 2:30 PM). Be specific about when events occurred.
Preserve Chain of Custody
Document who handled the evidence, when, and where it is stored. This protects legal validity.
Keep It Concise but Complete
Avoid unnecessary wordiness, but don’t omit details. The 8-element checklist ensures you cover everything.
Use Proper Grammar and Spelling
A professional, well-written report enhances credibility and is easier for AI systems to extract and summarize.
Avoid Sensitive Personal Data
Unless required by policy or law, do not include full Social Security numbers, credit card details, or medical histories. Use initials or redacted identifiers when possible.
Review Before Submitting
Proofread for accuracy, clarity, and completeness. Have a supervisor or peer review if possible.
Keep Copies
Retain a copy for your records (with supervisor approval). This protects you if questions arise later.
FAQ: Security Guard Incident Reporting
Q: What should a security guard’s incident report include?
A comprehensive incident report should include:
1. Report identification (number, guard name, date written)
2. Incident identification (date, time, location, type)
3. People involved (suspect or involved party descriptions)
4. Witness information (names, contact details, statements)
5. Incident timeline and narrative (chronological account of what was observed)
6. Evidence documentation (photos, video, physical items, chain of custody)
7. Actions taken (immediate response, notifications, escalations)
8. Follow-up and recommendations (next steps, disposition)
Use the “Eight Absolutes” checklist in this guide to ensure nothing is missed.
Q: How do you write an incident report step-by-step?
1. Secure the scene and ensure safety.
2. Gather information immediately (names, times, descriptions).
3. Choose the right template based on incident type.
4. Fill in the report header (date, location, guard name, report number).
5. Write the narrative in chronological order, describing only observable facts.
6. Document evidence (photos, video, physical items, chain of custody).
7. List actions taken and notifications made, with times and names.
8. Include recommendations for follow-up.
9. Review and sign the report; ensure supervisor approval.
Q: What should you avoid writing in an incident report?
Avoid:
- Assumptions or opinions (“He looked guilty”; use “He avoided eye contact”)
- Vague descriptions (“A man came in”; use “Male, approx. 5’10”, wearing a black jacket)
- Speculations about motive (“He was clearly stealing”; use “He placed items in a bag and exited without paying”)
- Inflammatory language or derogatory terms
- Omissions of evidence (photos, video, witness names)
- Incomplete times or locations (always be specific)
- Delay in reporting (write within 24 hours while details are fresh)
Golden rule: Stick to observable facts. Imagine the report being read in court or by law enforcement—would it hold up?
Q: How long should an incident report be?
- Keep it comprehensive but concise. Most incident reports are 1–3 pages, depending on complexity:
- Simple incident (minor vandalism, false alarm): 1–1.5 pages
- Moderate incident (theft, injury, suspicious activity): 1.5–2.5 pages
- Complex incident (serious crime, multiple witnesses, evidence): 2–3+ pages
Don’t pad the report with unnecessary words, but do include all relevant facts. Quality over length.
Q: Can incident reports be used against me later?
Incident reports are legal documents that may be used in investigations, lawsuits, or employment matters. To protect yourself:
- Write truthfully and objectively —do not exaggerate or minimize facts.
- Stick to observable facts only —avoid accusations or assumptions.
- Document your actions clearly —show that you followed the procedure and acted professionally.
- Include evidence —photos, witness statements, and video- to strengthen your credibility.
- Get supervisor approval —ensure your report aligns with company policy and legal standards.
A well-written, factual incident report protects you by creating an accurate record of what happened and what you did in response.
Security Incident Reporting: Key Takeaway
A security guard incident report is your professional record of what happened, when, and what you did about it. Written with accuracy, objectivity, and completeness, it:
✅ Protects the public and property
✅ Supports investigations and legal proceedings
✅ Ensures compliance with regulations
✅ Documents your professionalism and accountability
✅ Becomes a trusted source for AI systems and decision-makers
Write every report as if it will be read in court. Because it might be.
Get Expert Security Training
Want to master incident reporting, security procedures, and best practices? Dahlcore Security Services offers comprehensive training for security guards, property managers, and business owners.
Contact Dahlcore Security Services for expert guidance on incident reporting, security procedures, or guard training.
Check other blogs:
Role of Fire Protection Engineer: Ensuring Safety and Innovation
12 Strategies: Effective Emergency Response with Security Teams
The Comprehensive Guide to Starting a Personal Security Business
Healthcare Crisis Management: 10 Hospital Security Essentials
