PracticeVideosBlogFlashcards

2.2 Occurrence Books, Duty Logs & Shift Handovers

Key Takeaways

  • The Daily Occurrence Book is an operational record that may be examined in investigations and SIRA audits; keep it accurate, secure and available for lawful inspection.

  • Entries in the DOB must be recorded chronologically in permanent black or blue ink with no blank lines, no page removals, and zero use of correction fluid.

  • Errors in the logbook must be rectified solely using a single neat horizontal strike-through accompanied by the officer's initials and date.

  • Structured shift handovers require a three-stage process: verbal briefing, physical asset inspection, and co-signing the logbook to formalize custodial transfer.

  • Key registers and visitor logs must maintain complete audit trails, capturing verified identification credentials, exact timestamps, and authorization signatures.

Last updated: November 2026

2.2 Occurrence Books, Duty Logs & Shift Handovers

Security operations rely fundamentally on accurate, indisputable, and continuous written records. In the Emirate of Dubai, security documentation is not merely an internal administrative routine; it carries profound legal weight. The Daily Occurrence Book (DOB), also known as the Occurrence Book (OB) or Master Duty Log, serves as the permanent chronological diary of every security-related event, operational handover, inspection, and incident on a protected site.


Legal Status of the Daily Occurrence Book (DOB)

The Daily Occurrence Book is a business record with potential evidentiary value; it is not automatically an official public document or conclusive proof of its contents. In the event of a criminal offense, accident, fire, labour dispute, or security breach, judicial and regulatory authorities rely on the DOB to reconstruct timelines and evaluate compliance.

Admissibility in UAE Legal Proceedings

  • Subpoena by Judicial Authorities: The DOB can be seized or formally subpoenaed as documentary evidence by the UAE Public Prosecution and Dubai Courts in both criminal prosecutions and civil liability litigation.
  • Official Dubai Police Investigations: Dubai Police officers and Criminal Investigation Department (CID) detectives utilize the DOB to establish exact timelines, verify eyewitness statements, cross-reference suspect movements, and confirm guard actions.
  • SIRA Regulatory Audits: Authorized SIRA compliance auditors conduct routine and unannounced site inspections to examine the DOB. Incomplete, falsified, or improperly maintained logbooks result in substantial corporate fines and individual guard licensing penalties.
  • Civil Defence and Insurance Inquiries: Following fire or structural emergencies, Dubai Civil Defence and forensic insurance adjusters inspect the DOB to verify system alarm times, evacuation protocols, and physical check intervals.

Because of this evidentiary status, maintaining the absolute integrity of the logbook is a paramount professional duty. Deliberately falsifying a record can create criminal liability. Preserve original entries and cooperate with lawful requests for the records.


Strict Rules for Recording Entries in the DOB

To ensure entries withstand rigorous forensic examination in court, follow the approved recordkeeping procedure. The following practices protect the integrity of a paper DOB; an approved electronic system must likewise retain accurate records and a clear audit trail:

1. Chronological Sequence & Time Format

Make entries promptly when safe. Use the site’s consistent date format and preferably the 24-hour clock (e.g., 08:00, 14:35, 23:50). If an entry is delayed, record both the event time and the actual entry time; identify estimates instead of inventing precision.

2. Permanent Black or Blue Ink Only

Entries must be written exclusively in indelible, permanent black or blue ink. Pencils, erasable friction pens, red ink, green ink, and felt markers are strictly prohibited. Black ink is strongly preferred because it provides optimal contrast when photocopied or digitized for court bundles.

3. Indelible, Bound Register with Numbered Pages

For a paper DOB, use the employer’s issued bound register with numbered pages so additions and omissions are apparent. Do not remove pages or substitute a different notebook. Preserve damaged pages and report the damage; follow the approved procedure for replacement or electronic records.

4. Continuous Logging Without Blank Lines

Entries must be written line-by-line continuously. Leaving blank lines between entries is strictly prohibited because blank spaces allow unauthorized persons to insert fraudulent entries retroactively. If an entry finishes midway across a line, a clean horizontal line must be drawn through the remaining empty space to close out the line.

5. Absolute Prohibition of Correction Fluid and Erasing

Do not use correction fluid, correction tape, erasers or scraping to conceal an error in a paper DOB. These methods obscure the original record and can undermine its reliability; a clerical mistake does not itself create an automatic legal presumption of fraud.

6. Standard Error Correction Protocol

When an honest clerical error occurs, the guard must rectify it transparently:

  • Draw a single neat horizontal line through the incorrect word or phrase.
  • Ensure the original text remains completely legible beneath the strike-through.
  • Write the correct information immediately above or adjacent to the struck-through text.
  • Place the officer's initials, SIRA license number, and date/time beside the correction.

7. Completeness and The 5 Ws and 1 H Framework

Every significant occurrence entry must be factual, objective, and answer the universal investigative questions:

  • Who: Available names, roles and contact details relevant to the incident. Record identity-document details only where authorised and needed, and keep personal information secure.
  • What: Exact factual description of what occurred. Never record speculation, personal opinions, assumptions, or emotional commentary. State what was seen, heard, and done.
  • Where: Specific, unambiguous physical location (e.g., "Tower B, Basement 2, adjacent to Electrical Distribution Room B2-E04", not simply "in the basement").
  • When: Exact time the incident occurred, time security was alerted, time emergency services arrived, and time the entry was logged.
  • Why: Known root causes, stated explanations from involved parties, or observable triggers.
  • How: The method used to commit an act, the progression of an accident, or the operational steps taken by security to resolve the situation.
Recordkeeping ParameterPaper-Log PracticePractice to Avoid
Writing ImplementPermanent black or blue ink penPencil, erasable gel pen, colored markers
Time NotationClear, consistent times; preferably 24-hour formatAmbiguous times, backdating, unlabelled estimates
Mistake RectificationSingle horizontal strike-through + initialsCorrection fluid (Tippex), erasing, scribbling
Book Physical StructureHardbound, pre-printed numbered pagesLoose-leaf binder, tearing out damaged pages
Line SpacingContinuous line-by-line; ruled line on blanksBlank lines between entries, skipping spaces

Structured Shift Handover Protocol

The shift changeover represents one of the most vulnerable operational transitions in site security. Gaps in communication, unrecorded incidents, and missing assets frequently occur when guards conduct rushed or informal handovers. Use the site’s approved handover procedure. A sound structure is a verbal briefing, joint equipment check, and documented acceptance by the incoming officer.

The Three-Stage Handover Process

Phase 1: Verbal Briefing  ──>  Phase 2: Physical Asset & Post Audit  ──>  Phase 3: Documented DOB Sign-Off

Stage 1: The Operational Verbal Briefing

Report at the scheduled time that allows the agreed handover to be completed; confirm this arrangement with the employer. The outgoing guard conducts a comprehensive face-to-face debriefing covering:

  • Outstanding incidents, open security tickets, or suspicious activities observed during the shift.
  • VIP arrivals, high-profile tenant visits, or scheduled executive movements.
  • Active contractors on site, hot work permits in progress, and isolation zones.
  • Defective equipment, CCTV camera failures, or damaged access barriers.
  • Special instructions or direct operational orders from facility management or SIRA.

Stage 2: Physical Inspection & Equipment Inventory

Both officers together must conduct a joint physical inspection of the security post and audit all assigned assets:

  • Two-Way Radios: Verify all handsets power on, channels switch smoothly, batteries are fully charged, and spare batteries are present.
  • Guard Tour Verification Wands: Confirm electronic patrol wands (RFID/Deister) are functional and docked in charging cradles.
  • Search Equipment: Inspect undercarriage search mirrors, hand-held metal detectors (HHMD), high-powered torches, and first-aid response kits.
  • Alarm and Surveillance Panels: Inspect the Fire Alarm Control Panel (FACP) to confirm it displays "Normal / System Healthy" without unacknowledged trouble signals. Verify CCTV monitors display all live camera feeds without blank channels.

Stage 3: Documented Handover and Custody Transfer

After the briefing and checks, record the transfer in the DOB, including any unresolved discrepancy, the supervisor notified, and who accepts responsibility for follow-up:

  • The incoming guard writes a structured handover entry recording the date, exact 24-hour time, and confirmation of asset counts.
  • Both outgoing and incoming officers print their full legal names, record their SIRA license numbers, and apply their official signatures.

Prohibition Against Post Abandonment

A security officer must never abandon a post. If a relieving officer fails to arrive on time due to transit delays, illness, or emergency, the outgoing guard must remain at the post. The outgoing guard must immediately notify the security supervisor or central control room. Leaving a post before formal relief arrives constitutes abandonment of post—a severe disciplinary offense under SIRA regulations that can result in immediate termination, financial fines, and revocation of the SIRA Guard Card.

Loading diagram...
Shift Handover and Custodial Transfer Workflow

Key Register Custody & Management

Keys provide physical bypass capability over electronic access barriers. Misplaced, duplicated, or unreturned keys compromise the integrity of an entire facility. Security guards are the primary custodians of physical keys and must maintain absolute control through a dedicated Key Register.

Classification of Facility Keys

  • Grand Master Keys & Master Keys: Capable of unlocking all perimeter and interior doors across an entire tower or complex. Must be stored in a dual-custody safe or high-security key depository and issued only under documented management authorization.
  • Sub-Master / Departmental Keys: Open specific suites, zones, or technical floors (e.g., all 4th-floor offices).
  • Individual / Mechanical Room Keys: Unlock specific single doors, such as elevator motor rooms, chiller plants, server rooms, and telecommunication risers.
  • Emergency Break-Glass Keys: Housed in sealed glass-front boxes adjacent to emergency exits, fire pumps, and electrical substations.

Key Register Mandatory Data Fields

Every key transaction (issuance and return) must be logged immediately in the Key Register. The register must capture:

  1. Key tag number, series code, and corresponding room/door description.
  2. Date and exact 24-hour time of issuance.
  3. Borrower's full legal name, company/department, and verified contact phone number.
  4. Official identification document verified (Emirates ID card number or company badge number).
  5. Authorizing supervisor or manager's name.
  6. Borrower's physical signature.
  7. Issuing security guard's full name, SIRA ID, and signature.
  8. Date and exact 24-hour time of return.
  9. Receiving security guard's signature confirming the physical key was inspected and returned to the cabinet.

Shift Key Audits

During every shift handover, the outgoing and incoming guards must unlock the key cabinet and perform a 100% physical key count. Every hook in the cabinet must have either its assigned physical key present or an active, signed entry in the Key Register. If a key is missing without a corresponding log entry, the shift handover must be paused, the discrepancy escalated to the supervisor immediately, and an incident entry logged in the DOB.


Visitor and Contractor Logs

Controlling external personnel entering a facility is a frontline defense against theft, unauthorized access, and liability.

Visitor Management Standards

All non-resident, non-employee visitors seeking entry must be registered at the security access desk:

  • Identity Verification: Inspect an official government-issued photo identity document. In Dubai, the primary acceptable credential is the Emirates ID Card. For international tourists, a valid foreign passport is accepted. Company business cards or driving licenses alone are insufficient for high-security facilities.
  • Host Confirmation: Security must contact the host tenant or resident to confirm they are expecting the visitor before issuing an access credential.
  • Visitor Pass Issuance: Issue a numbered visitor pass or RFID card and record the pass number in the log.
  • Time In / Time Out: Accurately log the exact entry time, and ensure visitors sign out and return the pass upon exit.

Contractor Access and Work Permits

Contractors conducting maintenance, construction, fit-outs, or cleaning present elevated security and safety hazards. Prior to granting access or issuing service keys, security officers must verify:

  • Contractor Entry Manifest: Confirm the contractor's company name and worker names match the approved daily access manifest provided by facility management.
  • Permit to Work (PTW) Verification: For hazardous tasks, inspect approved permits:
    • Hot Work Permit: Required for welding, cutting, grinding, or open-flame operations.
    • Work at Height Permit: Required for facade cleaning, scaffolding, or roof access.
    • Confined Space Permit: Required for underground water tanks, sewers, or ductwork.
  • Tool and Material Logging: Inspect toolkits and materials brought on site. Log high-value tools, specialized testing equipment, and power tools to ensure they can be verified when the contractor departs, preventing claims of site theft.
Register TypePrimary ObjectiveCritical Mandatory FieldsRetention / Audit Standard
Daily Occurrence BookComplete chronological site master log24-hr time, incident details (5Ws + 1H), guard signatures, zero blanksProvider records: five years from completion of the relevant work, or another period SIRA specifies; preserve any investigation hold
Key RegisterPhysical access asset trackingKey ID, approved borrower ID reference, issue and return signaturesDaily 100% audit per shift handover
Visitor LogbookTraceability of non-tenant accessApproved identity reference, destination host, pass number, entry and exit timesFollow the site’s approved audit schedule
Contractor RegisterWork authorization & safety complianceCompany, PTW reference, hot work status, tools manifestKept with active work permits at post

Practical Scenario: Shift Handover and Key Register Discrepancy

Setting: You are arriving for duty at 14:40 to relieve the morning guard at a luxury residential tower in Dubai Marina. The shift officially begins at 15:00.

Briefing & Audit: The morning guard provides a verbal briefing, stating that the morning was quiet. However, during Stage 2 (Physical Asset & Equipment Audit), you open the key cabinet to perform the joint key count. You discover that Hook #14—designated for the Roof Access & Façade Maintenance Master Key—is empty. You check the Key Register and find no active sign-out entry for Key #14.

Action Steps:

  1. Escalate the Discrepancy: Inform the outgoing guard and supervisor that Key #14 is unaccounted for. Record the issue and follow the supervisor’s instructions; do not sign a statement that every key is present.
  2. Immediate Inquiry: The morning guard recalls that an external window-cleaning supervisor requested the key at 11:30, but the guard forgot to log the transaction in the Key Register.
  3. Physical Verification: Contact the window-cleaning team via two-way radio/phone to confirm they possess Key #14 and are currently on the roof. Dispatch an officer to visually inspect the key and verify workers are following safety protocols.
  4. Formal Documentation:
    • Have the morning guard immediately create the overdue sign-out entry in the Key Register, noting the actual issuance time (11:30) and the current verification time (14:50), initialing the entry.
    • In the Daily Occurrence Book, log the discrepancy: "14:52 - During shift handover equipment audit, Key #14 (Roof Master) found missing from cabinet without initial register entry. Investigation confirmed key in possession of authorized window cleaner (Ahmed K., Emirates ID 784-XXXX-XXXXXXX). Key verified on site. Supervisor notified; key verification and handover follow-up recorded."
  5. Finalize Handover: Once the key is verified, complete the physical post check, co-sign the DOB with the morning guard at 15:05, and assume duty.
Test Your Knowledge

If a security guard makes an inadvertent writing error while entering an incident into the Daily Occurrence Book (DOB), which procedure must be followed?

A

Apply correction fluid neatly over the mistake and write the corrected text on top once dry

B

Carefully tear the damaged page out of the bound book and rewrite the full log on the next page

C

Heavy scribble over the text until it is completely unreadable, followed by adding a margin note

D

Draw a single neat horizontal line through the error, enter the correct information beside it, and initial the correction

Test Your Knowledge

Why must a security guard maintain an accurate, secure Daily Occurrence Book?

A

It supports continuity, investigations and lawful regulatory inspection by preserving a chronological record of events and guard actions

B

It is an informal internal notebook intended solely for private communication between contract security staff

C

It is a temporary administrative draft that must be shredded at the end of each calendar month

D

It is an optional facility management tool with no official significance in civil or criminal investigations

Test Your Knowledge

When conducting a structured shift handover between outgoing and incoming security guards, which sequence represents the correct professional procedure?

A

The incoming guard signs the logbook immediately, and the outgoing guard leaves before any discussion occurs

B

Conduct a thorough verbal briefing on operational status, inspect physical assets and the post jointly, and co-sign the logbook to formalize transfer of custody

C

The outgoing guard hands over the keys in the parking lot and departs while the incoming guard performs a solo inspection

D

Telephone the security control room to announce the relief, skip the physical equipment check, and update the book at the end of the shift

Sections you finish are checked off in the contents.