3.2 Critical Incident Data Extraction: The 5 W's, Weapons, & Hazards

Key Takeaways

  • The 5 W's (Where, What, When, Who, and Weapons) establish the non-negotiable operational hierarchy of emergency incident data extraction.
  • Location ('Where') is the primary and indispensable operational variable; if an emergency call disconnects, field units can only be dispatched if a verifiable location is known.
  • Suspect descriptors must be extracted systematically from head to toe, while vehicle information must follow the standardized CYMBAL protocol (Color, Year, Make, Body, Additional, License).
  • Direction of Travel (DOT) combined with time elapsed dictates the geographical perimeter size and interception routes for responding patrol units.
  • Hidden officer-safety hazards—including dogs, barricades, hazardous materials, and intoxicating substances—must be actively separated from background dialogue and flagged immediately.
Last updated: September 2026

3.2 Critical Incident Data Extraction: The 5 W's, Weapons, & Hazards

[!IMPORTANT] The Absolute Primacy of Location: In emergency telecommunications, Location is paramount above all other information. If an emergency call abruptly terminates after only five seconds, an accurate address allows emergency units to respond and conduct a physical welfare check. Conversely, an exhaustive description of an armed robbery with multiple injured victims is entirely useless if the dispatcher does not know where the incident occurred.

Public safety dispatchers operate as the critical intelligence node between citizens in crisis and field responders navigating dangerous environments. On the POST Dispatcher selection battery, audio prompts evaluate your ability to identify, isolate, and prioritize vital facts embedded within complex, rambling emergency dialogues. Mastering the structured 5 W's Framework ensures you capture every essential variable required for field response, officer survival, and exam comprehension questions.


The 5 W's Framework: The Dispatch Information Hierarchy

Every emergency incident, regardless of complexity or scale, is anchored by five fundamental operational inquiries: Where, What, When, Who, and Weapons.

                        +------------------------+
                        | 1. WHERE (Location)    | <── Absolute Top Priority
                        +------------------------+
                                    │
                        +------------------------+
                        | 2. WHAT (Incident)     | <── Classification & Urgency
                        +------------------------+
                                    │
                        +------------------------+
                        | 3. WHEN (Time Lapse)   | <── Tactical Response Mode
                        +------------------------+
                                    │
                        +------------------------+
                        | 4. WHO (Parties)       | <── Suspects / Victims / RP
                        +------------------------+
                                    │
                        +------------------------+
                        | 5. WEAPONS & HAZARDS   | <── Officer Safety & Survival
                        +------------------------+

1. Where: The Foundational Anchor

Where did the incident occur, where is the caller, and where is the suspect? Location data must be specific and multi-layered:

  • Primary Address: Exact building number and street name (e.g., 4521 West Oak Boulevard).
  • Sub-Units: Apartment, suite, unit, building number, or floor level (Apt 304, Building C).
  • Intersecting Streets: Closest cross streets (Between Elm Ave and 5th St).
  • Access Constraints: Gated community entry codes, security access doors, alleyway access, rear stairs, or obscured building numbers.
  • Highway and Geographic References: Interstate route, travel direction (e.g., I-80 Eastbound), nearest milepost marker, exit ramp, or physical landmark (e.g., 0.5 miles west of Summit Cutoff).

2. What: The Incident Nature

What specific criminal violation or emergency condition is occurring? Telecommunicators must drill down through emotional exaggeration to identify the underlying statutory or service classification. Is it a non-violent property dispute, an in-progress physical fight, a burglary, or a medical crisis?

3. When: Time Elapsed and Response Urgency

Determining time of occurrence dictates whether units respond with emergency equipment (Code 3: red lights and siren) or routine driving (Code 2):

  • In Progress (IP): Occurring right now; suspect is on scene or active threat exists.
  • Just Occurred (JO): Transpired within the past 1 to 5 minutes; suspect is in the immediate vicinity or fleeing.
  • Past / Cold: Incident occurred hours, days, or weeks prior; no active threat, suspect is long gone, and scene is static.

4. Who: Identifying Roles and Demographics

Establishing who is on scene prevents responding officers from mistaking victims or reporting parties for suspects. Roles must be delineated cleanly: Reporting Party (RP), Victim (VIC), Suspect (SUSP), Witness (WIT), and Bystanders.

5. Weapons and Hazards: Officer Survival Intelligence

Are weapons involved, seen, implied, or accessible? The presence of a weapon instantly alters tactical approach protocols, requiring multi-unit coordination, contact-and-cover tactics, or perimeter containment.

Operational QuestionSpecific Data Points RequiredConsequence of Omission
WhereStreet number, street type, apt/suite, cross streets, gate codesUnits dispatched to wrong address; critical response delay
WhatPhysical actions, property damage, injuries, legal classificationWrong resources dispatched (e.g., sending patrol without EMS)
WhenExact time elapsed, in progress vs. just occurred vs. coldUnits respond code-3 to cold scenes, or code-2 to active violence
WhoRoles, names, physical traits, caller relationshipOfficers mistake innocent victims or witnesses for perpetrators
WeaponsFirearm, edged weapon, bludgeon, caliber, visibilityResponding officers ambushed or unaware of lethal threats

Suspect Descriptors and Fleeing Vectors: Head-to-Toe and CYMBAL

When callers describe fleeing perpetrators and vehicles, the information typically arrives out of order. Professional dispatchers reorder these fragmented traits into standardized reporting schemas.

The Systematic Head-to-Toe Suspect Protocol

Always organize personal descriptors sequentially from the head downward:

  1. Core Demographics: Apparent sex, race or ethnic origin, estimated age range, estimated height, and body build/weight (e.g., Male, Hispanic Adult, mid-20s, 5'10", thin build).
  2. Head and Facial Characteristics: Hair color, hair length, hairstyle (dreadlocks, buzz cut, bald), facial hair (beard, mustache, goatee), eyewear, complexion, and headwear (baseball cap, ski mask, beanie).
  3. Upper Body Garments: Outerwear type and color (heavy winter coat, leather jacket, windbreaker), inner shirt color/pattern, logos or graphics, and hand coverings (gloves).
  4. Lower Body Garments: Pants or shorts type and color (baggy dark denim jeans, gray sweatpants, cargo shorts), belts, or distinct tears.
  5. Footwear: Shoe style and color (white athletic sneakers, black steel-toe work boots, sandals).
  6. Distinguishing Physical Marks: Tattoos (location and imagery, especially on neck or hands), visible scars, limps, amputations, or piercings.
  7. Carried Items: Backpacks, duffel bags, crowbars, or parcels.

The Standardized CYMBAL Protocol for Vehicles

Public safety agencies across North America utilize the CYMBAL mnemonic to systematically structure vehicular descriptors for broadcast across patrol channels:

  C ─── Color          (e.g., Dark green over tan, primer spots)
  Y ─── Year           (e.g., Approximate era: late 2010s, early 2000s)
  M ─── Make           (e.g., Chevrolet, Toyota, Ford, Honda)
  B ─── Body Style     (e.g., 4-door sedan, 2-door coupe, extended cab pickup, SUV)
  A ─── Additional     (e.g., Tinted windows, dented rear bumper, roof rack, paper plates)
  L ─── License Plate  (e.g., California 7XYZ123, partial plate ending in '456')

Direction of Travel (DOT) and Perimeter Calculation

Recording the Direction of Travel (DOT) and method of flight is essential for establishing containment perimeters:

  • Flight on Foot: An average person sprints at 10–12 mph for short bursts and walks at 3–4 mph. In 3 minutes, a foot suspect can travel approximately 0.25 to 0.5 miles from the scene. Dispatchers establish an immediate four-block containment perimeter.
  • Flight in Vehicle: In urban or suburban streets, a fleeing vehicle traveling at 30 to 45 mph covers 0.5 to 0.75 miles per minute; on highways, it covers 1 to 1.5 miles per minute. Recording the travel vector (NB on Valley Blvd from 6th) enables neighboring agency alerts and highway intercept positioning.

Identifying Hidden Officer-Safety Hazards

In emergency call-taking, the most lethal threats to responding personnel are often not the primary suspect, but secondary environmental or situational hazards obscured within the caller's narrative.

+-----------------------------------------------------------------------------------+
|                         Critical Officer-Safety Hazards                           |
+-----------------------------------------------------------------------------------+
|  ANIMAL HAZARDS        | Large, unrestrained, or aggressive dogs on premises.     |
|  ENVIRONMENTAL HAZARDS | Downed power lines, gas leaks, hazardous chemical odors. |
|  BARRICADES & ACCESS   | Reinforced security gates, deadbolted doors, traps.      |
|  BEHAVIORAL TOXICITY   | Acute narcotic psychosis (PCP/meth), suicidal ideation.  |
|  SECONDARY WEAPONS     | Accessible hunting rifles in gun safes, hidden blades.   |
+-----------------------------------------------------------------------------------+

1. Unrestrained Animals

A caller reporting a domestic argument may casually mention in passing: "Our two rottweilers are going crazy in the yard!" Responding officers jumping a back fence or entering the front gate face sudden, severe animal attacks unless the dispatcher isolates this hazard and transmits: CAUTION: TWO LARGE AGGRESSIVE DOGS IN YARD.

2. Barricaded Subjects and Structural Hazards

If a suspect has retreated into a back bedroom, locked the door, and claimed they "will not be taken alive", the incident transitions from a routine disturbance into a barricaded subject scenario. Officers must not force entry blindly, as doing so invites an immediate ambush through the door.

3. Alcohol, Narcotics, and Mental Health Crises

Subjects experiencing severe substance-induced delirium or psychiatric crises may exhibit superhuman physical resistance, insensitivity to pain, or erratic weapon deployment. Dispatchers must flag reported drug consumption (particularly stimulants, PCP, or synthetic narcotics) to alert officers to employ distance and specialized de-escalation or containment tools.


Critical Incident Extraction Drill and Call Log Breakdown

Analyze the following high-stress incident transcript and observe how critical data points are extracted into structured dispatch records.

Simulated Emergency Call Transcript

Dispatcher: "911, what is the location of the emergency?"

Caller (sobbing, sound of dogs barking loudly): "Please help me, it's at the Oakridge Apartments! My ex-boyfriend just kicked in my front door!"

Dispatcher: "Oakridge Apartments. What is your apartment number and street address?"

Caller: "It's 820 North Meadow Lane, Apartment 14B! It's upstairs on the second floor!"

Dispatcher: "Is your ex-boyfriend still inside the apartment?"

Caller: "No, he ran out when my neighbor came into the breezeway! But he was waving a black semi-automatic pistol around! He pointed it at my neighbor!"

Dispatcher: "What is his name, and what does he look like?"

Caller: "His name is Marcus Vance. He's Black, about 28 years old, tall, maybe six-foot-one, very muscular. He has a tattoo of a panther on the right side of his neck. He's wearing a red Chicago Bulls jersey over a white long-sleeve shirt, black jeans, and white Nike sneakers."

Dispatcher: "Which way did Marcus go, and does he have a car?"

Caller: "He ran down the back stairs toward the west parking lot about two minutes ago! He drives a silver Honda Civic, two-door, with heavily tinted windows and a loud muffler. The license plate starts with 8-B-K! And please tell the police to watch out for the pit bull—my neighbor's brown pit bull broke its leash during the fight and is roaming the upstairs breezeway!"

Structured Incident Log Breakdown

Data FieldExtracted IntelligencePriority / Safety Classification
Location820 N Meadow Ln, Apt 14B (Oakridge Apts, 2nd Floor)Priority 1: Primary response destination
Event / What459 Burglary (kicked in door) & 245 ADW (pointed gun)Priority 1: In-progress felony violence
WhenJust occurred (suspect fled 2 minutes prior)Priority 1: Rapid perimeter search active
Suspect (Who)Marcus Vance, BMA, 28 yrs, 6'1", muscular, panther neck tatTactical broadcast suspect descriptor
Clothing (LSW)Red Bulls jersey, whi long-sleeve, blk jeans, whi Nike shoesHead-to-toe visual identification
WeaponBlack semi-automatic pistol (handgun)CRITICAL OFFICER SAFETY WARNING
Vehicle (CYMBAL)Silver, late-model, Honda, 2-door Civic, tint/loud exhaust, CA # 8BK...Broadcast vehicle BOLO for intercept
Direction (DOT)Fled west parking lot in veh, approx 2 mins agoTactical perimeter corridor calculation
On-Scene HazardsUnrestrained aggressive brown pit bull loose in 2nd fl breezewayCRITICAL ENTRY HAZARD FOR OFFICERS
Test Your Knowledge

Which information element must a public safety dispatcher establish first and foremost during any incoming emergency call?

A
B
C
D
Test Your Knowledge

Under the standardized CYMBAL protocol for vehicle identification, which sequence correctly organizes the descriptors of a fleeing vehicle?

A
B
C
D
Test Your Knowledge

A caller reports an ongoing physical fight at a rural residence and states: "My brother-in-law is out of his mind on narcotics, breaking furniture, and his two 100-pound rottweilers are loose in the front yard barking violently at everyone." Which critical officer-safety hazard must be flagged immediately for responding units?

A
B
C
D