6.1 Field Note-Taking Standards, Daily Occurrence Logs & Memory Aids

Key Takeaways

  • A security guard's field notebook is an official, discoverable legal document admissible as evidence in criminal, civil, and regulatory proceedings under the Canada Evidence Act and Ontario Evidence Act.
  • Notebooks must be permanently bound with pre-numbered pages in indelible black or blue ink; loose-leaf binders, torn-out pages, and blank lines are prohibited because each destroys the record's evidentiary integrity.
  • Errors are corrected only by drawing a single line through the mistake, writing the correct text, and adding initials and date—liquid paper, erasers, and scribbling are legally forbidden.
  • Under the contemporaneous rule, entries must be made during the incident or as soon as practicable while recollections are fresh, as unexplained delays severely undermine witness credibility in court.
  • A site runs distinct records for distinct purposes—field notebook, daily occurrence log, incident report, use of force report, hazard report, and witness statement—while life-safety emergencies go to 911 before any report is written.
Last updated: September 2026

Field Note-Taking Standards, Daily Occurrence Logs & Memory Aids

Core Principle: In Ontario private security, an on-duty field notebook is not a casual personal notepad—it is an official legal record. Under provincial and federal evidence rules, contemporaneous field notes constitute primary evidence that can make or break a prosecution, civil lawsuit, or regulatory inquiry.


The Legal Status of Security Notebooks

A licensed security guard's field notebook is an official document subject to disclosure and admission into evidence in Ontario courts under the Canada Evidence Act (R.S.C. 1985, c. C-5) for federal criminal matters and the Ontario Evidence Act (R.S.O. 1990, c. E.23) for provincial offences and civil proceedings.

When an incident occurs on a guarded site—whether an arrest, an assault, a slip-and-fall injury, or a break-and-enter—the security guard becomes a key factual witness. In subsequent legal proceedings, the guard's field notebook is fully discoverable under Rule 30 of the Ontario Rules of Civil Procedure and the criminal disclosure principles established by the Supreme Court of Canada in R. v. Stinchcombe (1991). A guard can be formally compelled to produce their notebook in court through a subpoena duces tecum (a court order commanding a witness to appear and bring specified physical documents).

While the physical notebook is typically issued by and remains the legal property of the security agency or property owner, the guard holds continuous physical custody and personal accountability for every entry made during their shifts. Notebooks must be retained in secure storage according to statutory limitation periods (typically at least two years under the Ontario Limitations Act, 2002, and longer for critical incidents, serious personal injury claims, or incidents involving minors).


Physical and Formatting Standards for Field Notebooks

To ensure evidentiary integrity and withstand intense judicial scrutiny, every Ontario security guard must adhere to strict physical and formatting rules:

1. Bound Format with Pre-Numbered Pages

  • Bound Format: Notebooks must have sewn, glued, or permanently stitched bindings. Loose-leaf binders, spiral-bound notebooks, perforated tear-away pads, and folded sheets of scrap paper are strictly prohibited. Loose or perforated pages can be removed or inserted undetected, completely undermining the document's legal integrity in court.
  • Numbered Pages: Every page must be consecutively numbered. If the manufacturer did not pre-number the pages, the guard must manually number every page in permanent ink from page 1 to the end before writing the first operational entry. This guarantees chronological continuity and proves that no pages were torn out or replaced.

2. Cover Identification Details

Before deployment, the guard must clearly document identification details on the inside front cover:

  • Guard's full legal name and PSISA licence number;
  • Security agency or employer name;
  • Notebook sequence number (e.g., "Book 4 of 2026");
  • Date notebook commenced (start date) and date concluded (end date);
  • Agency contact information and return instructions if lost or mislaid.

3. Indelible Permanent Ink

Entries must be written exclusively in permanent black or blue non-erasable ballpoint or gel ink. Pencil, erasable ink pens, felt markers that bleed through pages, and colored inks (red, green, purple) are strictly forbidden. Permanent ink ensures that entries cannot be altered, faded, or erased over time.

4. Structure of Daily Entries

Every shift entry must follow a standardized opening format:

  • Date: Full calendar date in standard format (e.g., "Wednesday, September 9, 2026");
  • Location & Post: Specific site name, building address, and assigned post (e.g., "Metro Logistics Centre, Gatehouse 2");
  • Shift Hours: Scheduled shift start and end times (e.g., "0700 hrs – 1900 hrs");
  • Weather & Environmental Conditions: Temperature, lighting conditions (daylight, dusk, darkness, artificial floodlights), precipitation (heavy rain, freezing rain, clear, dense fog), and ground surface conditions (dry asphalt, icy sidewalk, wet tile). Environmental factors are frequently contested in slip-and-fall civil litigation and nighttime motor vehicle collisions;
  • Duty Partner & Equipment Issued: Full names and licence numbers of partner guards, and equipment custody recorded (radio callsign, patrol wand, master keys, body-worn camera).

5. Timekeeping and Line Usage

  • 24-Hour Military Time: All timestamps must be written in the left margin using 24-hour military time (0000 to 2359). Military time eliminates confusion between a.m. and p.m. (e.g., 0815 vs. 2015).
  • No Blank Lines: Guards must write continuously on every line. Leaving blank lines between entries or at the bottom of pages creates space where fraudulent or retroactive entries could be inserted later.
  • Diagonal Void Line (Z-Line): If empty lines remain at the end of an entry or at the conclusion of a shift before turning to the next page, the guard must draw a firm diagonal line (a diagonal slash or Z-line) across the unused area, sign, and date the line.

6. Prohibited Notebook Content

The notebook is an official public document that may be scrutinized by judges, juries, Crown prosecutors, and defence attorneys. It must NEVER contain:

  • Personal reminders, grocery lists, personal phone numbers, or doodles;
  • Emotional reactions, unprofessional slang, or sarcastic commentary;
  • Subjective opinions, derogatory generalizations, or offensive humor;
  • Confidential personal passwords or alarm bypass codes that compromise facility security if disclosed in open court.

Error Correction Protocol: The Single-Line Rule

Mistakes inevitably occur when writing notes during fast-moving, high-stress security incidents. How a guard corrects a mistake determines whether their testimony will be believed or dismissed by a court.

The Mandatory Correction Procedure

  1. Draw a single neat horizontal line through the incorrect word, number, or phrase.
  2. Ensure the original erroneous text remains fully legible beneath the line.
  3. Write the correct word or phrase immediately above or adjacent to the struck-through text.
  4. Place the guard's initials and the current date immediately beside the correction.

Absolute Prohibitions

  • NO Correction Fluid or Tape: Liquid paper, white-out, and correction tape are strictly prohibited.
  • NO Erasing: Pencil erasers, rubber erasers, or chemical ink eradicators are forbidden.
  • NO Obliteration: Heavy scribbling, black markers, cross-hatching, or blacking out text is unacceptable.
  • NO Page Removal: Tearing out, cutting, or removing pages—even blank or heavily stained ones—is an immediate evidentiary violation.
CORRECT:   5492  RC 2026-09-09
           5429  [single strike through 5429, correct number 5492 written above with initials RC]

INCORRECT: [White-out liquid applied over error, or text completely blacked out with marker]

The Judicial Rationale

In court, opposing counsel will closely inspect the original notebook. If an entry is concealed with white-out or black ink, the court cannot determine what was originally written. Under the legal doctrine of adverse inference, the judge or jury may presume that the concealed text contradicted the guard's testimony or exposed misconduct. Conversely, a clean single-line strike demonstrates honesty, transparency, and procedural rigor.


The Contemporaneous Note-Taking Standard

The evidentiary value of a security guard's notebook relies fundamentally on the contemporaneous rule.

Definition and Legal Meaning

"Contemporaneous" means notes made at the exact time the event occurs, or as soon as practicable thereafter while the memory is fresh in the mind of the witness.

Human memory degrades swiftly following a traumatic or chaotic event. Courts place the highest probative value on notes recorded immediately because they reflect fresh, unvarnished recollections before external influences, conversations with colleagues, or retrospective rationalizations can taint memory.

Managing Delays in Note-Taking

During critical incidents—such as administering CPR, restraining an aggressive trespasser, or evacuating a burning facility—a guard cannot stop to write in a notebook. In such circumstances, the guard must:

  1. Complete all life-safety and emergency operational tasks first;
  2. Document the incident in their notebook at the earliest safe opportunity;
  3. Clearly record the actual time of entry alongside the actual time the event occurred, noting the legitimate reason for the delay.

Example Entry:
1630 hrsEntry made regarding 1515 hrs physical restraint of trespasser at West Entrance. Note delayed due to continuous medical monitoring of individual, scene containment, and formal custody handover to Toronto Police Service (Constable Smith #4421).

Failing to explain a delay invites defence cross-examination arguing that the guard fabricated or altered details after conferring with management or other witnesses.

Prohibition on Collaborative Note-Taking

Each guard's notebook must reflect their own independent, honest sensory observations. Guards working the same incident must NEVER:

  • Dictate notes to one another;
  • Copy word-for-word from another guard's notebook;
  • Harmonize or align conflicting recollections prior to writing notes.

While guards may discuss an event to ensure site safety, collaborative note-taking constitutes collusion, which destroys witness credibility and can lead to criminal perjury investigations.


Daily Occurrence Logs (DOL) vs. Field Notebooks

In professional security deployments, guards interact with two foundational log formats: the individual Field Notebook and the master Daily Occurrence Log (DOL) (also termed the Shift Activity Log or Daily Log).

Feature / DimensionField NotebookDaily Occurrence Log (DOL)Incident Report (IR)
Primary PurposePersonal contemporaneous legal record of an individual guard's observations and actionsFacility-wide master chronological record of all operational activity, access, and patrols during a shiftDetailed, standalone formal legal investigation document for specific unusual, criminal, or emergency events
Physical CustodyKept in the individual guard's pocket; retained personally throughout the shiftMaintained at the central security desk or logged into facility management softwareSubmitted to client management, corporate risk teams, police, and insurance adjusters
AuthorSingle individual security guardMaintained collaboratively by all on-duty control desk guards and patrol officersLead responding security guard, investigator, or supervisor
Typical ContentDetailed notes, specific suspect descriptions, verbatim statements, environmental dataShift handovers, equipment custody sign-outs, routine patrol tours, visitor counts, contractor passesComprehensive 5W1H investigation narrative, evidence lists, witness statements, CYMBAL vehicle data
Time Format24-hour military time in left margin24-hour military time for every discrete entry24-hour military chronological narrative
Evidentiary UsePrimary memory refresh aid for the guard on the witness stand in courtProves facility operational status, duty staffing, patrol round verification, and baseline activityPrimary exhibit in criminal trials, civil lawsuits, insurance claims, and inquests

Core Components of a Professional Daily Occurrence Log

  1. Shift Handover & Staffing: Names and licence numbers of incoming and outgoing guards, verification of site keys, master access badges, radios, and emergency panic alarms.
  2. Equipment Custody Register: Sign-in and sign-out tracking for flashlights, patrol wands, mobile phones, body-worn cameras, and facility vehicles.
  3. Routine Patrol Tours: Timestamps and checkpoint locations for electronic tour wand scans or NFC tags across mechanical rooms, fire exits, and exterior perimeters.
  4. Access Control & Facility Activity: Deliveries received, contractors granted access, parking infractions issued, and doors unlocked or secured.
  5. Incident Cross-References: Concise one-line references to significant occurrences directing readers to full incident reports (e.g., "1410 hrs: Trespass incident at North Loading Dock. Individual escorted off site. See Incident Report #2026-088").

Evidentiary Rules and Court Testimony: Refreshing Memory

When a security guard is summoned to testify in the Ontario Court of Justice or Superior Court of Justice, months or years have often elapsed since the incident. Under Canadian law, two legal doctrines govern the use of notebooks in court:

1. Present Memory Revived (Refreshing Memory)

Under this common-law doctrine, a witness uses their contemporaneous notes on the witness stand to trigger their faded memory. The legal procedure is precise:

  • The guard is asked a question by counsel and states that they cannot recall the specific detail (e.g., exact badge number or licence plate);
  • Counsel requests permission from the presiding trial judge for the witness to consult their contemporaneous field notes;
  • Once the judge grants permission, the guard inspects their notebook silently;
  • The guard looks up from the notebook and testifies orally from their revived independent memory;
  • The notebook itself does not become an exhibit; the guard's oral testimony is the evidence.

2. Past Recollection Recorded

If years have passed and the guard has zero independent recollection of the incident even after reading their notes, the notes may still be admitted into evidence under the doctrine of Past Recollection Recorded, provided four strict criteria are met:

  1. The notes were made contemporaneously with the event;
  2. The witness had personal knowledge of the facts at the time the notes were made;
  3. The witness states under oath that they have no present independent memory;
  4. The witness confirms that they had a habit or duty of recording facts accurately and that the notes were truthful when written.

Under this doctrine, the field notebook itself is tendered into evidence as a physical exhibit.

Surviving Defence Cross-Examination

Defence lawyers are trained to dissect security notebooks to impeach witness credibility. They look for:

  • Inconsistent Ink Colors: Suggests notes were added or doctored later;
  • Variations in Handwriting Style or Slant: Indicates stress, haste, or different authors;
  • Missing Timestamps or Gaps: Allows counsel to argue events occurred differently;
  • Torn Pages or Missing Numbers: Leads to devastating accusations of destroyed exculpatory evidence;
  • Subjective Opinions: Used to argue that the guard was biased against the accused.

Maintaining meticulous, disciplined note-taking standards during every single shift protects the guard, their employer, and the administration of justice.


The Different Types and Purposes of Reports

Section 4 of the ministry syllabus requires guards to know the different types and purposes of reports and to identify the appropriate method of communication to report an issue. A site typically runs the following documents, and using the wrong one is itself a reporting failure:

Report TypePurposeTypical Trigger
Field notebookThe guard's personal contemporaneous legal recordEvery shift, continuously
Daily Occurrence Log (DOL)Facility-wide chronological record of the shiftEvery shift, continuously
Incident reportFull account of one specific eventTheft, assault, arrest, damage, medical event, trespass
Use of force reportDetailed justification of any physical interventionAny hands-on contact, restraint, or handcuffing
Hazard / deficiency reportNotify the client of an unsafe or defective conditionBurnt-out lighting, ice, blocked exit, failed door hardware
Maintenance / work order requestRequest a repair through the client's systemNon-urgent building faults
Lost and found reportChain of custody for found propertyAny item taken into the guard's possession
Vehicle / patrol logRecord of mobile patrol activity, mileage and checkpointsMobile and relief posts
Witness statementA third party's own account in their own wordsAny incident with independent witnesses (see Section 6.4)
Shift handover / pass-on logTransfer of live issues to the incoming guardEnd of every shift

Choosing the method of communication is a separate judgement from choosing the document. Escalate by urgency: life safety goes to 911 first, then the client's emergency contact, then the supervisor; an in-progress crime goes over the radio to dispatch immediately and is written up afterward; a non-urgent deficiency goes into the log and the client's work-order system. Never let the writing of a report delay a call that protects life.

Loading diagram...
Field Note-Taking Lifecycle and Courtroom Evidentiary Pipeline
Test Your Knowledge

While conducting an access audit at a commercial office tower, a security guard discovers an error in their field notebook entry from thirty minutes prior, having recorded an incorrect badge number for a contractor. What is the legally required method for correcting this error in Ontario?

A
B
C
D
Test Your Knowledge

Two years after an arrest on a commercial property, a security guard is subpoenaed to testify for the Crown in the Ontario Court of Justice. When called to the witness stand, the guard realizes they cannot recall the precise verbal warnings given to the accused. What is the proper procedure for the guard to use their field notebook to assist their testimony?

A
B
C
D
Test Your Knowledge

At 0300 hours during a night shift at an industrial terminal, a security guard completes their exterior patrol round and has three blank lines remaining at the bottom of the page in their bound field notebook before the next hour's activities. According to standardized security note-taking protocols, what should the guard do with these blank lines?

A
B
C
D