Investigation: Evidence, Interviews, and Case Documentation
The investigation domain tests how a locksmith or security professional supports inquiries into losses, forced entry, and key-control failures. Candidates must understand evidence handling: chain of custody, scene preservation, photography, and the difference between physical evidence (tools, damaged hardware, keys) and documentary evidence (key logs, work orders, access records). Know the basics of interviews and statements: voluntary participation, accurate recording, and avoiding leading questions.
Expect questions on distinguishing fact from inference. A trap is treating a locksmith's opinion about how a lock was defeated as established fact; opinion must be supported by physical findings. Another trap is confusing reasonable suspicion with proof. Understand report writing: chronological, objective, and free of conclusions not supported by evidence.
Worked rule of thumb
For any finding, ask: what did I observe, what did I infer, and what evidence supports the inference? Record observations first, inferences second, and label them clearly. If a lock shows tool marks, document location, orientation, and dimensions before removing or repairing hardware.
Know the limits of your role: preserve and document, do not contaminate. Understand privacy and lawful access to records. A well-organized investigation file lets another person reconstruct the sequence of events without your presence.