Incident Report Forms: Structure and Completion

Why Incident Reports Matter

Every report you write is a legal document. Courts, prosecutors, defense attorneys, insurance adjusters, and your agency's liability counsel will read what you produce. A poorly completed form can cause a criminal case to be dismissed, expose your employer to civil liability, or result in evidence being ruled inadmissible. Accurate, complete, objective reporting is therefore not a paperwork exercise — it is a core professional duty and, in many states, a legal requirement tied to your security guard license.

Choosing the Right Form

Using the wrong form is itself an error. Standard security operations typically use four form types:

• General Incident Report — the default for events that do not fall cleanly into a specialized category, such as a disturbance or an access-control violation.
• Theft Report — used when property is taken or attempted to be taken without authorization; captures suspect description, item description, estimated value, and witness information.
• Property-Damage Report — used when physical property is damaged, whether intentionally (vandalism) or accidentally; documents condition before and after, parties involved, and estimated repair cost.
• Missing-Person Report — used when an individual cannot be located on or near the protected premises; especially critical when the subject is a juvenile, elderly person, or individual with a cognitive impairment. Law enforcement handoff procedures are triggered by this form.

Select the form that matches the primary nature of the incident. If an event involves both theft and property damage, complete both forms and cross-reference each with the other's report number.

Anatomy of a Standard Incident Report Form

Most jurisdictions and security organizations use forms that share a common structure. Know each section before you put pen to paper.

Header Block — Date, time (use 24-hour clock to avoid a.m./p.m. confusion), location (specific address or post), report number, and officer/guard name and badge or ID number. Never leave any header field blank; a missing date or location can make the entire report legally worthless.

Incident Classification — A check-box or drop-down field that identifies the incident type. This drives which downstream sections apply. Incorrect classification delays routing to the right supervisor or law enforcement unit.

Subject / Suspect Information — Full name if known; if unknown, write "Unknown" and then provide a physical description: estimated height, weight, age, sex, race (using accepted standardized descriptors), hair color and length, clothing, and any distinguishing features. Do not leave this block empty even for an unknown subject.

Victim / Complainant Information — Name, contact information, and relationship to the property or site. Get photo ID when possible and note the ID type and number.

Narrative Block — Written in the first person ("I observed..."), past tense, chronological order. Use objective, factual language. Describe what you saw, heard, smelled, or physically detected. Do not include opinions, conclusions about guilt, or emotional language. "Subject appeared nervous" is borderline opinion; "Subject's hands were shaking and subject made repeated eye contact toward the exit" is observable fact.

Evidence / Property Section — List every item of evidence by description, quantity, condition, and disposition (where it went — retained, turned over to law enforcement, photographed). Chain-of-custody integrity begins here.

Witness Block — Name, contact information, and a brief note on what the witness observed. Each witness should ideally be listed on a separate line or attachment.

Notifications Made — Record every person you notified: supervisor, law enforcement (including unit, officer name, and report number they assigned), medical responders, property owner. Include the exact time of each notification.

Signature and Certification Block — Your signature certifies the information is true and accurate to the best of your knowledge. Falsifying a security report is a criminal act in most states and will result in license revocation.

Common Errors and Their Consequences

| Error | Consequence |

|---|---|

| Blank required fields | Report may be rejected; evidence chain broken |

| Vague or opinion-based language | Admissibility challenged in court |

| Wrong form selected | Delayed law enforcement response |

| Incorrect time (a.m./p.m. confusion) | Timeline contradicts surveillance video |

| Narrative written out of chronological order | Credibility undermined under cross-examination |

| Missing witness contact info | Witness cannot be located for prosecution |

Safety Considerations

During any incident requiring report completion, your physical safety and the safety of others comes first. Do not begin writing while a threat is still active or uncontained. Secure the scene, render or call for aid if there is a medical emergency, and request law enforcement backup when warranted. Documentation follows stabilization — never the other way around.

When documenting a missing juvenile or vulnerable adult, treat the situation with urgency: notify your supervisor and law enforcement immediately, then complete paperwork concurrently, not afterward.

Tips for Timed Completion

In drills and real incidents, time pressure causes errors. Use this sequence: (1) read the entire scenario before writing anything, (2) select your form, (3) complete the header block, (4) work section by section top to bottom, (5) write the narrative last, (6) review every field before submitting. Budget roughly one-third of available time for the narrative block.