9.2 Crime Scene Preservation & Evidence Handling
Key Takeaways
- The primary duty of a security officer at a crime scene is life safety and rendering emergency first aid; once life safety is secured, scene preservation and perimeter isolation take absolute precedence over investigation.
- Security personnel must establish dual perimeters: an Inner Perimeter restricted strictly to authorized forensic investigators and an Outer Perimeter for staging, command, media containment, and crowd control.
- A Crime Scene Security Log must be maintained at the single entry point, documenting every individual's full name, agency, badge/ID number, exact entry/exit times, and specific purpose for entering.
- Security officers must never touch, move, or collect physical evidence unless facing imminent destruction by environmental hazards (e.g., heavy rain or fire), in which case it must be documented and protected.
- The chain of custody is an unbroken chronological record tracking every transfer, analysis, and storage of evidence; any break in the chain of custody risks evidence suppression in Pennsylvania courts.
9.2 Crime Scene Preservation & Evidence Handling
Quick Answer: At a crime scene, a security officer's immediate priority is life safety (calling 911, triage, and emergency first aid), followed by establishing Inner and Outer perimeters to freeze the scene. Security officers must never touch, move, or collect evidence ("not playing detective"), must maintain a detailed Crime Scene Security Log for all entrants, and must preserve the unbroken chain of custody until officially handing over control to Pennsylvania State Police or municipal law enforcement.
The Security Officer's Primary Role: Life Safety First, Scene Preservation Second
When a major crime occurs on client property—such as a homicide, armed robbery, aggravated assault, or commercial burglary—private security personnel are frequently the first responders on scene. A security officer must understand their strict legal and operational boundaries:
- Life Safety Always Takes Precedence: The preservation of human life supersedes all evidentiary concerns. If victims or suspects are injured, the officer's immediate duty is to verify that the threat is neutralized, call 911 immediately, and render trauma first aid or CPR within their training scope.
- Directing Emergency Medical Services (EMS): When paramedics arrive, the security officer must guide them to the victim along a single, defined path of ingress and egress to minimize disturbance to surrounding physical evidence. Note everything medical personnel touch or move.
- Preserving and Freezing the Scene: Once life safety is addressed, the officer's sole duty is to secure and freeze the crime scene. Security guards are not police detectives, forensic specialists, or criminal investigators. Security guards must never search for clues, handle weapons, dust for fingerprints, or interrogate suspects beyond basic on-scene detention.
Establishing Crime Scene Perimeters: Inner vs. Outer Zones
Proper scene isolation prevents cross-contamination, destruction of trace materials, and unauthorized public or employee intrusion. Security personnel must establish a dual perimeter system as early as possible:
┌───────────────────────────────────────────────────────────┐
│ OUTER PERIMETER (Staging, Command Post, Media, Crowds) │
│ ┌─────────────────────────────────────────────────────┐ │
│ │ INNER PERIMETER (Strict Exclusion Zone) │ │
│ │ ┌───────────────────────────────────────────────┐ │ │
│ │ │ ACTUAL CRIME SCENE & PHYSICAL EVIDENCE │ │ │
│ │ │ (Bodies, Weapons, Bloodstains, Casings) │ │ │
│ │ └───────────────────────────────────────────────┘ │ │
│ │ * Only Authorized Forensic Detectives Allowed │ │
│ └─────────────────────────────────────────────────────┘ │
│ * Single Entry/Exit Point (Crime Scene Security Log) │
└───────────────────────────────────────────────────────────┘
The Inner Perimeter (Exclusion Zone)
- Definition: The critical zone encompassing the actual location of the crime, including points of entry, points of exit, weapon drop points, bloodstain patterns, and physical struggle areas.
- Access Restriction: Absolute exclusion. No one—including security supervisors, property managers, client executives, or off-duty guards—may enter the inner perimeter. Only authorized forensic detectives, the coroner/medical examiner, and investigating law enforcement officers may cross this line.
- Physical Marking: High-visibility yellow crime scene tape, barricades, or locked physical doors.
The Outer Perimeter (Buffer & Support Zone)
- Definition: The larger perimeter surrounding the inner exclusion zone. It serves as a secure operational buffer.
- Functions: Houses the police command post, investigative staging, equipment storage, witness holding areas, media containment, and crowd control.
- Access Point: All access into the inner zone must funnel through a single, strictly monitored access point at the outer perimeter boundary.
Golden Rule of Perimeter Sizing: Always establish the perimeter larger than initially deemed necessary. It is easy for arriving police to shrink a perimeter later, but impossible to recover evidence trampled or contaminated outside a perimeter that was set too small.
Crime Scene Security Log Management
The Crime Scene Security Log is an essential legal document that tracks every individual who crosses into the secured perimeter. In Pennsylvania courts, defense attorneys frequently challenge forensic evidence by alleging unauthorized contamination. The security log serves as the prosecution's proof of integrity.
Required Information in the Security Log
- Full Legal Name & Title: (e.g., Detective James Vance / Paramedic Sarah Cole).
- Agency / Organization & Identification Number: (e.g., Philadelphia Police Dept, Badge #4122 / Medic 14, ID #884).
- Exact Time In & Time Out: Recorded to the minute in military or standard time.
- Specific Purpose for Entry: (e.g., "Render emergency trauma aid to gunshot victim" or "Photograph ballistics evidence").
Security officers must enforce the log impartially. If a corporate property manager or high-ranking executive demands entry to "inspect company property," the officer must politely but firmly refuse entry and record the refusal in their field notes.
Preventing Contamination & Protecting Fragile Evidence
Physical evidence is fragile and easily destroyed. The cardinal rule for private security is: DO NOT TOUCH, MOVE, ALTER, OR COLLECT EVIDENCE.
Rules for Evidence Protection
- Do Not Alter the Scene: Never turn lights on or off, do not use facility bathrooms or sinks within the scene, do not open or close windows/doors unless required to preserve life, and never smoke, eat, or discard trash in the area.
- Weapons Handling Exception: If a firearm or knife is located at the scene, do not pick it up. Post an officer directly over it to prevent anyone from tampering with it. If a weapon must be moved due to an immediate life-safety hazard (e.g., an active crowd rushing the weapon), photograph its exact position first, handle it only by textured grips with gloved hands, note its exact location, and immediately surrender it to arriving police.
- Environmental & Weather Protection: If transient evidence (such as footwear impressions, tire tracks, or blood drops) is exposed to heavy rain, snow, or high winds before police arrive, protect it without touching it. Place a clean, elevated cardboard box, traffic cone, or inverted clean plastic bin over the impression to shield it from precipitation.
- Packaging Prohibition: Never package wet biological evidence (blood, saliva) in airtight plastic bags, as moisture promotes bacterial growth that rapidly destroys DNA profiles.
Classifications of Evidence
Security officers must recognize the five major categories of evidence to identify and protect them effectively:
| Classification | Definition & Characteristics | Common Examples |
|---|---|---|
| Physical Evidence | Inanimate tangible objects that can be seen, touched, collected, and analyzed in a crime laboratory. | Firearms, knives, spent cartridge casings, shattered window glass, pry bars, stolen merchandise, discarded clothing. |
| Transient Evidence | Temporary, perishable physical evidence that degrades, evaporates, or dissipates rapidly over time. | Gunpowder odor, cigarette smoke smell, warm engine hoods, footwear prints in melting snow, ice cubes in a drink. |
| Pattern Evidence | Recognizable shapes, distributions, or physical markings produced by direct contact or physical force. | Blood spatter trajectories, vehicle skid marks, tire track tread impressions, pry tool gouge marks, shattered glass fracture lines. |
| Biological Evidence | Organic materials originating from a human body containing physiological fluids or DNA. | Blood drops, saliva on beverage cups, epithelial "touch DNA" on door handles, semen, hairs with intact follicular root bulbs. |
| Digital / Electronic Evidence | Latent or recorded data stored on magnetic, optical, or electronic media. | CCTV surveillance recordings, electronic keycard badge access logs, alarm panel audit trails, visitor management databases. |
The Chain of Custody: Legal Mandate & Mechanics
The Chain of Custody is the continuous, unbroken, chronological documentation that accounts for the custody, control, transfer, analysis, and disposition of physical evidence from the moment of discovery to final presentation in court.
┌───────────────────────────────────────────────────────────┐
│ CHAIN OF CUSTODY │
├──────────────┬──────────────┬──────────────┬──────────────┤
│ DISCOVERY & │ EVIDENCE │ SECURE │ FORENSIC LAB │
│ LOGGING │ PACKAGING │ TRANSFER │ & COURT │
│ (Officer A) │ (Officer A) │ (Detective) │ (Prosecution)│
└──────────────┴──────────────┴──────────────┴──────────────┘
* Complete Log: Date, Time, Location, Item #, Signatures
Elements of Chain of Custody Documentation
Every time an item of physical evidence changes hands or storage locations, the transfer must be logged with:
- Detailed Item Description: Item number, make, model, color, serial number, and exact location where discovered.
- Date and Exact Time of Transfer: Recorded contemporaneously.
- Releasing Party Information: Printed name, signature, badge/ID number, and agency.
- Receiving Party Information: Printed name, signature, badge/ID number, and agency.
- Specific Purpose of Transfer: (e.g., "Transferred to PSP Forensics for ballistics analysis").
- Tamper-Evident Packaging: Evidence bags sealed with tamper-evident tape, with the transferring officer's initials written across the tape boundary.
Consequences of a Broken Chain of Custody
If evidence is left unattended in an unlocked drawer, transferred without signatures, or unaccounted for during a gap in time, the chain of custody is broken. In Pennsylvania courts, defense counsel will file a Motion to Suppress Evidence. Under the Pennsylvania Rules of Evidence, the trial judge will exclude the compromised evidence, often forcing the prosecution to dismiss felony criminal charges.
Formal Handoff to Law Enforcement (PSP and Municipal Police)
When Pennsylvania State Police troopers or municipal police detectives arrive, the on-scene security officer must execute a structured, professional handoff:
- Comprehensive Verbal Briefing: Brief the lead investigator immediately on:
- The exact nature of the incident and current status of victims/suspects.
- All actions taken by security personnel and the path used by EMS.
- The boundaries of the established inner and outer perimeters.
- Key witnesses detained or located on site.
- Surrender of Documentation: Provide the lead detective with a copy of the Crime Scene Security Log and the names of all on-duty security staff.
- Digital Video Preservation: Immediately isolate and export digital video recorder (DVR/CCTV) footage of the incident, logging the system time offset, camera angles, and burning the master footage to an encrypted, unedited disc or USB drive.
- Recording Official Case Data: Before departing or resuming regular duties, obtain the lead investigator's full name, badge number, police department/barracks, and official Police Incident / Case Number for inclusion in your final security report.
Scenario: The Ruined Weapon at the Commercial Robbery
Scenario: Following an armed robbery at a commercial warehouse, Security Officer Kevin discovers a semi-automatic handgun dropped by the fleeing suspect near the emergency exit. Kevin picks up the firearm by the trigger guard, clears the magazine, places the weapon in his duty belt pouch, and walks around the property looking for spent shell casings. When municipal police detectives arrive 20 minutes later, Kevin proudly hands the pistol to the detective.
Analysis: Officer Kevin committed severe procedural errors that destroyed critical physical evidence. By handling the firearm, Kevin obliterated latent fingerprints and deposited his own epithelial skin cells (contaminating DNA profiles). By moving the gun, he destroyed its exact spatial relationship to the exit door (ballistics geometry). By pocketing it and walking around, he broke the chain of custody. Kevin should have left the firearm untouched, established an inner perimeter around the doorway, posted an officer to guard it visually, kept all persons away, and pointed it out to arriving detectives.
Exam Tip: Perimeter Sizing, Life Safety Priority & Chain of Custody Integrity
- Order of Priorities: Always remember the immutable sequence: 1. Life Safety / EMS -> 2. Scene Isolation / Perimeter -> 3. Evidence Preservation -> 4. Documentation / Police Handoff.
- Evidence Rule: Private security officers preserve evidence by protecting the perimeter—they never collect or search for evidence unless destruction is imminent from fire or severe weather.
- Chain of Custody Question: A chain of custody begins the exact moment evidence is first observed or secured and must remain completely unbroken until presented at trial.
Upon discovering a serious violent crime scene with a severely injured victim and a discarded weapon on the ground, what is the security officer's FIRST immediate operational priority?
What is the primary function of establishing an Inner Perimeter at a major crime scene on commercial property?
Shoe impressions in melting snow, the smell of burnt gunpowder, and a hot vehicle engine hood are all examples of which classification of evidence?