The frozen camera and the man in the grey hoodie
It is 22:35 on a Tuesday and you are monitoring sixteen cameras in a city mall control room. A man in a grey hoodie has been walking between the same three rows of two-wheeler parking for about forty minutes, twice crouching near a scooter's handlebar. Camera 7 covers that area, but its picture is frozen on the same frame and the on-screen timestamp reads 22:29; the DVR clock is twelve minutes behind your wristwatch. Your colleague has left for a break. The floor supervisor is on rounds. The mall closes at 23:00. On camera 4 you now see a lone female staff member walking towards the same parking area through the fire-exit corridor.
1. What do you do in the next five minutes, in the order you would do it, and why that order?
Read the worked answer
The order follows one rule: secure the information first, then the people, then the property, then the system.
- Write down the time and the camera numbers before anything else. My observation is the evidence; a note two minutes later with a guessed time is weaker.
- Radio the floor supervisor with a factual description and behaviour, not a label: 'Male, grey hoodie, about 30, two-wheeler parking rows 4 to 6, crouching at handlebars, forty minutes.' Describing behaviour lets the supervisor judge; calling him a thief invites a false-arrest complaint.
- Warn the female staff member on the radio, tell her to hold at the fire-exit corridor entrance, and offer an escort. She is walking into the area I am watching, and I cannot see camera 7 live.
- Fix or bypass the frozen channel without leaving the console: check whether the whole DVR is frozen or only channel 7, note the fault, and switch my attention to the adjacent cameras that still cover the row. If it needs a reboot, that is the supervisor's job, not a reason to abandon the console.
- Do not leave the control room. Sixteen cameras unattended is a bigger risk than one suspicious man.
If a theft is actually seen to happen, I radio for a physical response; I do not go myself and I do not direct anyone to grab him.
2. What do you record, and how do you preserve the footage so it is usable if a theft is reported the next morning?
Read the worked answer
The record has to be complete enough to reconcile three different clocks - my watch, the display timestamp and the DVR clock.
In the log: date; time by my watch; the fact that the DVR runs twelve minutes slow, stated explicitly; the camera IDs (7 for the failed channel, 4 for the corridor, and whichever cameras still cover the parking rows); the man's description; each change of behaviour with a time; the radio calls and who answered; the time the freeze was noticed and what was done.
Preservation: export the relevant clip from the working channels rather than relying on a screenshot of a monitor, which is worthless as evidence. Keep a second copy on separate media. Record the export in a chain-of-custody register with time, file name, who handled it and who took custody. Electronic records need the certificate required for admissibility (Section 63 of the Bharatiya Sakshya Adhiniyam 2023, which replaced Section 65B of the Evidence Act), so the DVR's time drift must be documented before anyone argues about the timestamps.
The gap: the six minutes or more that camera 7 missed must be recorded as a gap. Never reconstruct what 'probably' happened from the frames either side - that destroys the credibility of everything else in the file.
3. State the limits on what you may do about the man and about the woman walking alone, and how you word the radio call to her.
Read the worked answer
On the man: there is no offence yet, only behaviour. I may observe, record and report. I may not follow him into a public street beyond the premises, photograph him and circulate the image on WhatsApp, use force, or detain him on suspicion - detention requires an offence in my presence, under the citizen's-arrest provision, and even then the correct next step is the police. Suspicion of 'casing' is not evidence, and a wrongful detention of an innocent customer is a serious legal exposure for the mall and for me.
On the woman: she is a staff member going about her lawful work. I may offer an escort and give her facts about the car park. I must not order her not to go, tell her what to do, or shape the warning around her gender in a way that suggests she is the problem. I must not watch her on the camera beyond the ordinary coverage of the area.
Radio wording: keep it short, factual, unalarmed, and on a channel that does not broadcast her name across the floor: 'Control to staff member near fire-exit corridor, there is an unidentified male in parking rows four to six. Please hold at the corridor entrance and I will send someone to walk you to the bikes. No alarm, nothing confirmed.' That gives her the information to decide, without spreading a panic or accusing anyone.