The 0200 Door and the Two-Minute Gap
You are working a lone overnight post at a 4-story office building with 60 tenant suites. Your post orders require a documented patrol every 90 minutes with a checkpoint scan at four locations: lobby, stairwell B, loading dock, and east parking garage. At 0205, during your lobby scan, you notice the north fire exit door is propped open with a wedge and the door alarm has not sounded. You are due at the loading dock checkpoint by 0215. Through the gap you see a van parked in the fire lane with its rear doors open. You have no radio, only a personal phone, and the building's on-site engineer is not scheduled until 0600. Your company's policy says not to confront suspected intruders and to call 911 for any sign of forced entry.
1. Sequence your actions for the next 10 minutes and justify the order.
Read the worked answer
1. Do not go through the door. Policy says no confrontation, and an open door with a running van is a strong indicator of an active theft in progress. Stepping into the fire lane alone at 0205 removes your only advantage - the building.
2. Move to a safe observation point and call 911. From inside, at an angle where you can see the door and the van but are not silhouetted in the opening, describe: address, north fire exit propped open, van color and plate if visible, number of people seen, and that you are an unarmed security officer. Reason: police need to know you are not a suspect and not armed.
3. Note the time and preserve the scene. Do not close the door or remove the wedge if doing so would cut off the suspects' only exit and force a confrontation past you. Write down the time you found it, the exact door, and what you observed.
4. Notify the account manager and log the missed 0215 checkpoint rather than leaving the area to hit it. A missed scan is explainable; abandoning your observation post during a suspected burglary is not.
2. Write the incident report narrative as it should appear, then identify what makes it defensible.
Read the worked answer
Narrative: 'At 0205 on [date] I was conducting the required lobby checkpoint scan when I observed the north fire exit door standing open approximately 8 inches, held by a wooden wedge at the bottom edge. The door alarm did not activate. Through the opening I observed a white cargo van parked in the fire lane facing east, rear doors open, no persons visible at that moment. I did not exit the building. At 0207 I called 911 from the lobby and reported the open door and the van. I maintained observation from the lobby corridor until officers arrived at 0221. At 0221 I secured the door and removed the wedge. I notified the account manager at 0224 and the engineer at 0600. Checkpoint scan at loading dock was recorded at 0240, delayed from 0215.'
What makes it defensible:
- Times for every action, not just the discovery.
- Observable facts only - 'open approximately 8 inches,' 'wooden wedge,' not 'someone broke in.'
- No conclusions about guilt or intent.
- The deviation is disclosed - the late checkpoint is stated, not hidden.
- Consistent with policy - the report shows you did not confront, which is exactly what the company required.