6.3 Professional Notebook Rules, Standard Reporting & Documentation

Key Takeaways

  • A security notebook is an official legal document subject to court subpoena and judicial scrutiny.
  • The ELBOW rule dictates notebook integrity: No Erasures, No Leaves torn out, No Blank lines, No Overwriting, and No Writing between lines.
  • Notebook entries must be written contemporaneously in permanent black/blue ink using 24-hour military time.
  • Formal incident reports must be factual, objective, and structured around the 5 Ws and 1 H framework.
  • Subject statements must be recorded as verbatim quotes enclosed in quotation marks, preserving exact wording.
Last updated: July 2026

Professional Notebook Rules, Standard Reporting & Documentation

In private security and law enforcement, documentation is not merely an administrative requirement—it is a core operational duty. A fundamental maxim of judicial proceedings is: "If it is not documented in writing, legally it did not happen." The professional security notebook and formal incident reports serve as the official historical record of an officer's actions. Months or years after an incident, these documents form the sole basis upon which an officer can refresh their memory, defend their professional conduct, and provide credible testimony in court under Section 9 of the Canada Evidence Act.

The Professional Security Notebook

A security officer's notebook is an official, legal document. It is subject to court subpoena, examination by Crown prosecutors and defense attorneys, and review by the Registrar of Security Services. Consequently, notebook entries must adhere to uncompromising standards of physical integrity and legal accuracy.

graph TD
    A[Shift Start Header: Date, Weather, Duty Partner, Gear Check] --> B[Contemporaneous Running Entries during Shift]
    B --> C{Incident Occurs?}
    C -- Yes --> D[Record Exact Times, Verbatim Quotes, 5 Ws & 1 H]
    C -- No --> E[Routine Patrol Log Entries]
    D --> F[Apply ELBOW Rule to Errors & Blank Lines]
    E --> F
    F --> G[Shift End Header & Officer Signature Line]

The ELBOW Rule for Notebook Integrity

To guarantee that a notebook is accepted by a court as a trustworthy, unadulterated contemporaneous record, security personnel must rigidly enforce the ELBOW rule. This mnemonic represents five absolute prohibitions:

  • E – No Erasures: Never erase pencil marks, use correction fluid (White-Out), or scrape away text. Erasing implies an intent to alter facts or conceal misconduct. To correct an error, draw a single neat line through the incorrect word, initial the line, and write the correct text immediately after. The original text must remain clearly legible.
  • L – No Leaves Torn Out: Never remove or tear pages (leaves) from a notebook. Security notebooks must feature factory-bound, sequentially numbered pages. Tearing out a page creates an immediate legal presumption that exculpatory evidence or documentation of officer wrongdoing was deliberately destroyed.
  • B – No Blank Lines: Never leave empty lines between entries or blank spaces at the end of paragraphs. Unused lines must be crossed out with a single diagonal line drawn from left to right and initialed. Blank lines create opportunities for unauthorized individuals to retroactively insert false information.
  • O – No Overwriting: Never write over existing text to alter numbers or letters (e.g., tracing over a "3" to turn it into an "8"). Overwriting appears deceptive. Cross out the incorrect figure with a single line, initial it, and write the correct figure adjacent.
  • W – No Writing Between Lines: All entries must be written squarely on the ruled lines. Squeezing words between lines or in margins suggests that details were added retroactively after the original entry was concluded.

Operational Standards for Notebook Maintenance

  • Contemporaneous Recording: Entries must be recorded at the exact time events occur or as soon as tactically feasible thereafter while memories are fresh.
  • Permanent Ink: All entries must be made in waterproof, permanent black or dark blue ink. Pencil is strictly prohibited due to its susceptibility to alteration.
  • 24-Hour Time Format: All timestamps must use 24-hour military time (e.g., 08:15, 17:45, 23:59) to eliminate ambiguity regarding AM and PM.
  • Verbatim Quotations: When recording statements made by subjects, victims, or witnesses, write down their exact words inside quotation marks ("..."), including profanity, slang, or grammatical errors. Never sanitize or paraphrase subject statements, as exact word choice provides critical evidence of state of mind, intoxication, or intent.
Feature / AspectStandard Required PracticeProhibited / High-Risk PracticeLegal Rationale
Error CorrectionSingle line strike-through, initialed, text remains legible.Chemical correction fluid (White-Out), scrubbing, heavy blackout scribbles.Demonstrates transparency; proves no fraudulent intent to conceal facts.
Page ContinuitySequential bound pages; no missing numbers.Tearing out damaged or erroneous pages.Prevents allegations of destroying evidence or hiding officer misconduct.
Timestamping24-hour military time format (e.g., 22:15 hrs).Standard 12-hour format without AM/PM tags (e.g., 10:15).Eliminates timeline confusion in court proceedings.
Subject QuotesVerbatim text in quotation marks ("I'm gonna kill you!").Paraphrasing (Subject threatened officer).Preserves precise legal elements of criminal threats and subject state of mind.
Narrative ToneObjective, empirical observations (facts only).Subjective opinions, emotional bias, assumptions.Ensures report remains credible and defensible under cross-examination.

Formal Incident Reports

While a notebook is a chronological running diary of an officer's shift, a Formal Incident Report is a standalone, structured document detailing a specific, significant event (such as a use-of-force incident, property damage, fire, or criminal offense). Incident reports are submitted to corporate management, insurance adjusters, property owners, and police investigators.

Objective vs. Subjective Writing

An incident report must be written in an entirely objective manner. Security professionals must ruthlessly strip away subjective opinions, emotional bias, personal prejudices, and speculative assumptions.

  • Subjective (Unacceptable): "The suspect was an extremely aggressive, drunken scumbag who was looking for a fight and acting crazy."
  • Objective (Required): "The subject was staggering from side to side, smelled strongly of an alcoholic beverage, had slurred speech, and shouted profanities while waving clenched fists at security staff."

The 5 Ws and 1 H Framework

Every complete incident report must thoroughly answer six fundamental questions:

  1. WHO: Full legal names, dates of birth, contact details, security license numbers, and physical descriptions of all involved parties (suspects, victims, witnesses, security officers, police constables, EMS staff).
  2. WHAT: Exact description of what transpired. Describe physical actions, entry methods, force techniques applied, property damaged, and specific items stolen.
  3. WHERE: Precise geographic and spatial location. Include street address, building name, floor level, room number, and exact relative positions of parties (e.g., "North stairwell between 2nd and 3rd floors").
  4. WHEN: Detailed timeline using 24-hour format. Record time of discovery, time of radio dispatch, time of physical contact, time 911 was called, time of police arrival, and time scene was cleared.
  5. WHY: The verifiable underlying cause or motive, only if established as factual (e.g., "Subject stated he entered the building to sleep due to cold weather"). Never speculate on unverified motives.
  6. HOW: Method of operation (MO) used by the suspect to commit the act, and the specific sequence of tactics used by security to resolve the situation.

Practical Field Scenario: Use-of-Force Documentation

Scenario: At 15:30 hours at a transit terminal in Burnaby, BC, an AST officer detains a non-compliant subject who actively resists arrest after committing a mischief offense. The officer applies a control hold and double-locked handcuffs.

Sample Notebook Entry Structure

2026-07-23 | Shift: 07:00 - 19:00 | Partner: SO J. Miller #4412 | Weather: Overcast, 18°C
Equipment Check: Handcuffs inspected, double-lock functional, key retained.

15:30 - Dispatch notes subject smashing glass display at Bay 4.
15:32 - Arrived Bay 4. Observed male (S-1) kicking glass door panel.
15:33 - S-1 Description: Male, approx 30 yrs, blue jacket, jeans, black boots.
15:34 - Issued verbal command: "Security! Stop kicking the door and step back."
15:34 - S-1 stated: "Screw you, I'll break whatever I want!"
15:35 - S-1 advanced with raised right fist. Initiated tactical retreat 2 meters.
15:35 - S-1 attempted right hook punch aimed at officer head. Avoided strike.
15:36 - Executed joint lock control hold to S-1 right arm. S-1 brought to ground.
15:37 - Handcuffs applied to S-1 wrists behind back. Keyholes facing outward.
15:37 - Tightness checked (index finger clearance verified). Double-lock engaged.
15:38 - S-1 immediately assisted to seated position (positional asphyxia protocol).
15:39 - Contacted Burnaby RCMP dispatch (Ref # 26-10492).
15:50 - RCMP Cst. Wong #6102 arrived on scene. Handover completed.
-------------------------------------------------------------- [J. Smith #8831]

Critical Review of Documentation Integrity

Notice how the log entry records exact timestamps, verbatim quotes, physical description, specific tactical resistance encountered, tightness checks, mandatory double-locking, immediate transition out of prone position, and police constable details. If called to testify two years later, this officer can read these notes under oath to prove complete adherence to AST standards and Criminal Code provisions.

Test Your Knowledge

What does the 'E' represent in the mandatory ELBOW rule for professional security notebooks?

A
B
C
D
Test Your Knowledge

Why is it strictly prohibited under AST standards to paraphrase subject statements in a notebook rather than recording verbatim quotes?

A
B
C
D
Test Your Knowledge

Which of the following statements represents proper objective writing for a formal incident report?

A
B
C
D
Test Your Knowledge

How should an officer handle unused blank lines at the bottom of a notebook page when concluding a shift entry?

A
B
C
D