8.2 Incident Response Procedures
Key Takeaways
- A structured framework — detect, assess, respond, secure, report, follow-up — keeps a guard's actions lawful and defensible under pressure.
- Life safety always outranks property protection: a guard never puts themselves or others at risk to save goods.
- A guard preserves a scene by not touching, moving, or cleaning anything; contamination can destroy evidence and weaken a police investigation.
- Crowd control means keeping bystanders back, keeping witnesses available, and never escalating; the guard controls the perimeter, not the crowd's emotions.
- Special scenarios — theft in progress, assault, found property, suspicious packages, and licensed-establishment incidents — each have BC-specific rules the BST exam tests.
8.2 Incident Response Procedures
Quick Answer: An incident is any event that disrupts the protected site — a theft, an assault, a found item, a suspicious package, a medical emergency, a disturbance at a licensed premises. The BST exam tests a guard's ability to follow a structured framework rather than improvising. The framework is: detect → assess → respond → secure → report → follow-up. Life safety is always the priority; the guard preserves the scene and hands over to police.
Why This Matters on the Exam
The BST Assessment tests whether a guard can perform the function safely, legally, and effectively. Incident response is where those three standards meet. A guard who improvises under stress can create liability (false imprisonment, assault, contaminated evidence) and endanger people. The exam presents scenarios — a shoplifter resisting, a fight at a bar, a backpack left in a lobby — and expects the candidate to choose the response that follows the framework, prioritizes life safety, preserves evidence, and hands over to police.
The Six-Step Incident Response Framework
| Step | What the guard does | Why it matters |
|---|---|---|
| 1. Detect | Notice the event (alarm, observation, report, radio call) | The guard cannot respond to what they do not see |
| 2. Assess | Determine nature, scale, hazards, persons at risk, resources needed | Decides the response level and who to call |
| 3. Respond | Take safe, lawful action — evacuate, call 911, approach consensually, arrest only if lawful | Lawful and proportionate response; no improvising |
| 4. Secure | Establish a perimeter, preserve evidence, control access, hold witnesses | Protects the scene for police and prevents contamination |
| 5. Report | Written incident report, statements, photos, CCTV preservation, notifications | Creates a defensible record and supports prosecution |
| 6. Follow-up | Repair processes, alarm-fault reporting, post-incident welfare, lessons learned | Prevents recurrence and supports the guard and team |
The order is not rigid — a fire alarm skips ahead to evacuation, and a medical emergency skips ahead to calling Emergency Medical Services (EMS) — but the steps are always completed.
Scene Safety and Establishing a Perimeter
Before acting, the guard ensures the scene is safe enough to approach. A downed person near a gas leak is not safe to reach; a fight involving weapons is not safe to break up alone. The guard establishes a perimeter — a controlled zone that keeps people out and preserves the scene:
- An inner perimeter around the immediate scene (the broken window, the downed person, the discarded weapon).
- An outer perimeter that keeps bystanders, media, and non-essential staff back.
- The perimeter is adjusted as responders arrive and the situation changes.
Perimeter tools include cones, tape, locked doors, parked vehicles, and the guard's own positioning. The goal is to prevent contamination of evidence and protect bystanders and responders.
Prioritizing Life Safety Over Property
The BST exam repeatedly returns to this rule: public and personal safety is always the priority — over property. A guard does not:
- Chase a thief into traffic.
- Enter a burning building to recover stock.
- Break up an armed robbery alone.
- Pursue a suspect at high speed.
A guard does:
- Evacuate people first, then protect property if safe.
- Call 911 and let police, fire, or EMS take the lead role.
- Observe, document, and report rather than confront.
Property can be replaced; a life cannot. This is not a slogan — it is the legal and professional standard, and it is the answer to many BST scenario questions.
Chain of Command and Notifications
A guard operates within a chain of command: the security company's supervisor, the site's client contact, and outside agencies. Notifications follow a clear hierarchy:
- Immediate safety threats — call 911 first.
- Security supervisor / dispatcher — per company policy.
- Client / site contact — per the post orders.
- Follow-up — written report and any required regulatory notification.
For incidents at a liquor-licensed establishment, the BC Liquor Control and Licensing Act context adds the licensee and (in serious incidents) the liquor inspector or police as notification recipients. Door-staff incidents are covered in the special-scenario section below.
Preserving the Scene and Evidence
A guard is usually first on scene and the first link in the evidence chain. The rule is: do not contaminate.
- Do not touch, move, or 'clean up' items (the dropped knife, the broken glass, the cash on the floor).
- Do not allow bystanders or staff to walk through the scene.
- Do not use the suspect's phone, or move a vehicle, or pick up a weapon to 'see whose it is.'
- Do photograph the scene before anything is moved, if site policy permits.
- Do note who entered the scene and when, for the police report.
- Do hold witnesses consensually until police can take statements.
Contamination can lead to exclusion of evidence at trial and weaken a prosecution. The guard's job is to hold the scene until police arrive and release it.
Crowd Control and Keeping Witnesses
Crowd control is perimeter work, not confrontation. The guard:
- Politely and firmly asks bystanders to move back.
- Avoids escalating with arguments or force.
- Identifies witnesses and asks them to remain (consensually) until police arrive.
- Notes names and contact information for any witness who must leave.
- Never detains a witness as a 'material witness' — a guard has no such power.
Dealing with Medical Emergencies (Link to First Aid)
When a person is injured or ill, the guard:
- Calls 911 for Emergency Medical Services (EMS).
- Provides first aid only to the level of the guard's current certification and site policy.
- Protects the scene so EMS can reach the person.
- Meets EMS at the door and guides them to the patient.
- Documents the event for the post-incident report.
A guard is not expected to be a paramedic. The job is to call EMS early, give basic care within training, and hand over to medical professionals.
Special Scenarios
Theft in progress. The guard observes the act ('finds committing'), assesses safety, and — only if safe and lawful — arrests under Criminal Code s.494(2) as the owner's authorized agent. If the thief is armed, violent, or fleeing into traffic, the guard observes, records, and calls police instead. s.494(3) requires forthwith delivery to a peace officer.
Assault. Life safety first. The guard calls 911 if anyone is injured or a weapon is present. The guard does not wade into a fight alone. The guard separates parties only if safe, secures weapons if they can be safely isolated, and preserves the scene for police.
Found property. A wallet, a phone, a bag left in a lobby: the guard takes custody, logs it in the found-property system, secures it, and tries to identify the owner through site management. Found property is not evidence unless connected to a crime; if it may be, the guard leaves it in place, photographs it, and calls police.
Suspicious package. The guard does not touch, move, or shake the package. The guard moves people away, establishes a perimeter, calls 911, and awaits police. If there are indicators of a hazardous substance (powder, unusual smell, leaking, threatening note), the guard also requests fire/hazmat through 911. Personal safety — including personal protective equipment (PPE) only if trained and available — always outranks curiosity.
Liquor-licensed establishment incidents. BC door-staff operate under the Liquor Control and Licensing Act context. The licensee (the establishment) is responsible for orderly conduct, and security supports the licensee. A guard at a licensed premises:
- Removes intoxicated or disorderly persons using no more force than necessary (a property-management power tied to the licensee's authority), not a citizen's arrest for being drunk.
- Calls police for violence, weapons, or refusal to leave.
- Documents every removal in an incident log (time, description, reason, force used, witnesses).
- Does not pour alcohol down a person's throat, lock exits, or detain 'to sober up' — those are outside authority and create liability.
A Numbered Incident-Response Procedure
Use this sequence for any incident that is not an immediate life-safety emergency (fire, active medical) that pre-empts it:
- Detect the event and note the time.
- Assess — nature, hazards, persons at risk, resources needed.
- Call 911 if anyone is injured, a weapon is present, a crime is in progress, or the situation is beyond the guard's authority.
- Establish a perimeter — inner scene and outer cordon.
- Approach only if safe; observe and document rather than confront.
- Preserve evidence — do not touch, move, or clean; photograph if permitted.
- Hold witnesses consensually; record names and contacts.
- Notify supervisor and client per post orders.
- Hand over to police, fire, or EMS on arrival; brief them and turn over the scene.
- Document — written incident report, CCTV preservation, statements.
- Follow-up — report faults, recommend corrective action, support post-incident welfare.
Worked Scenario
A residential building guard responds to a noise complaint on the 7th floor. On arrival, the guard finds a unit door ajar, a broken vase on the floor, and two residents arguing. One resident has a small cut on the hand.
Applying the framework:
- Detect — noise complaint, time logged.
- Assess — argument, possible injury, no visible weapon, broken glass (evidence).
- Call 911 — injury present and a possible assault; police and EMS requested.
- Perimeter — the guard does not enter the unit; positions at the door, asks others in the hallway to step back.
- Approach — speaks calmly from the doorway, asks if anyone needs medical help, tells both parties police and EMS are on the way.
- Preserve — does not pick up the vase, does not move anything, notes the time and positions of items.
- Witnesses — asks hallway bystanders to remain, takes names if they must leave.
- Notify — supervisor and building management.
- Hand over — meets police and EMS at the lobby, guides them up, briefs them at the door, turns the scene over.
- Document — written incident report with times, observations, notifications, and the names of witnesses.
- Follow-up — building management informed; alarm/door fault logged if relevant.
Key Takeaways
- The six-step framework — detect, assess, respond, secure, report, follow-up — keeps a guard's actions lawful and defensible.
- Life safety always outranks property: never risk people to save goods.
- A guard preserves a scene by not touching, moving, or cleaning anything — contamination can destroy evidence.
- Crowd control is perimeter work: keep bystanders back, hold witnesses consensually, do not escalate.
- Special scenarios — theft, assault, found property, suspicious packages, liquor-licensed incidents — each have BC-specific rules the BST tests.
A guard arrives at a retail stockroom after an alarm and finds a broken window, a dropped crowbar, and a missing television. Police are en route. What should the guard do with the crowbar?
Which sequence correctly reflects the BC security guard's incident-response framework?
A door-staff guard at a BC licensed premises is dealing with an intoxicated, disorderly patron who refuses to leave. Under the Liquor Control and Licensing Act context, which action is within the guard's authority?