NYPD Captain cheat sheet

Patrol guide entries are the Department's written directive system; each entry carries a number, a title, and a revision date, and superseded versions are withdrawn rather than layered.

A supervisor reviewing a member's action applies the directive in effect on the date of the incident, not the directive in effect at the time of review.

Complaints against members are routed to the Internal Affairs Bureau; the commanding officer retains responsibility for the member's assignment pending adjudication unless directed otherwise.

Use-of-force reporting is mandatory for each member who applies force and for each supervisor who observes or reviews it; the report is separate from the arrest or stop report.

Property and evidence vouchers require two members' signatures at the point of transfer from field to voucher; chain of custody begins at seizure, not at the precinct.

Roll call is the accountability point for tour: uniform, equipment, firearm, and shield are checked, and absences are logged before deployment.

Line-of-duty injury reports are filed before end of tour; failure to file within the tour requires a written explanation to the commanding officer.

A member may not engage in outside employment that conflicts with Department duties; approval is written and revocable.

The Department's rules impose discipline for conduct including neglect of duty, insubordination, and conduct prejudicial to the good order of the Department.

A member must report a known violation of law or rule by another member; failure to report is itself a chargeable offense.

Firearms are carried only when authorized; off-duty carry requires compliance with the Department's firearm regulations and qualification currency.

Members may not accept gratuities, gifts, or favors connected to their official position; nominal value does not create an exception.

Residency and address reporting obligations are conditions of employment; changes must be reported within the period set by rule.

A member placed on modified duty retains rank and pay unless suspended; suspension is a status change requiring documented authority.

Social media and public statements by members are governed by rules limiting disclosure of Department information and conduct reflecting on the Department.

Commanding officers must ensure subordinates know the rules applicable to their assignment; ignorance of a posted rule is not a defense.

Arrest authority depends on the classification of the offense: felonies and misdemeanors permit arrest on reasonable cause; petty offenses generally require the conduct to occur in the officer's presence.

Reasonable cause is a facts-and-circumstances standard; it requires more than suspicion and less than the proof needed for conviction.

A search incident to lawful arrest is limited to the arrestee's person and the area within immediate reach, and to evidence of the offense or officer safety.

Stop-and-frisk requires reasonable suspicion of a weapon or criminal activity; the frisk is limited to a pat-down for weapons unless probable cause develops.

Custodial interrogation requires Miranda warnings; the trigger is custody plus interrogation, not arrest alone.

Evidence obtained through an unlawful search is subject to suppression; exceptions include consent, plain view, exigency, and inevitable discovery.

Burglary requires unlawful entry into a building with intent to commit a crime therein; the intent must exist at entry.

A warrantless entry into a dwelling is presumptively unlawful absent consent, exigency, or hot pursuit.

Span of control for a patrol sergeant is commonly six to twelve officers; beyond that, the sergeant cannot verify activity and condition at roll call.

Discipline follows progressive steps: counseling, command discipline, then formal charges, unless the misconduct is serious enough to bypass the ladder.

Post assignments are made on crime pattern, call volume, and officer experience; a new officer is not assigned alone to a high-call post.

Supervisors document field performance contemporaneously; a later evaluation unsupported by contemporaneous notes is vulnerable on appeal.

Absence management requires verification of sick leave and pattern review; repeated use around weekends or holidays triggers a referral.

Officer wellness indicators include absenteeism, tardiness, complaints, and use-of-force frequency; a supervisor reviews the pattern, not a single event.

A supervisor must respond to a member's request for assistance and must document the response in the activity log.

Probationary members are evaluated against documented standards; deficiencies must be communicated before the probationary period ends.

Case assignment follows solvability factors: identifiable suspect, witness availability, physical evidence, and pattern linkage.

A detective's caseload is managed by aging reports; cases older than a set threshold without investigative activity require supervisory review.

Chain of custody records each transfer of evidence with date, time, and member; a break in the chain supports a challenge to admissibility.

Pattern analysis links cases by modus operandi, time and location clustering, and physical evidence; linkage must be documented before consolidation.

Confidential informants require documented reliability, a controlled-buy or corroboration plan, and supervisory approval before use.

Search warrant applications must state the factual basis for probable cause and the scope of the place and items to be searched.

Case closure requires a disposition code: arrest, exceptional clearance, unfounded, or suspended pending new information.

Investigative plans for major cases assign leads, set briefing intervals, and record decisions so the file can be reconstructed.

Incident Command System structure: command, operations, planning, logistics, and finance/administration; the incident commander sets objectives.

Unified command applies when multiple agencies have jurisdiction; each agency retains authority over its own personnel.

The first-arriving supervisor establishes command, sizes up the incident, and establishes a perimeter before assigning resources.

Span of control in ICS is three to seven subordinates per supervisor, with five as the planning target.

A critical incident requires a command post, a staging area, and a media point separate from the command post.

Evacuation versus shelter-in-place decisions rest on hazard type, time available, and route capacity; the decision and rationale are logged.

After-action review is conducted after every major incident and produces written corrective actions with assigned owners and dates.

Mutual aid requests are documented with the resource requested, the authority making the request, and the estimated arrival time.

Crowd management distinguishes a permitted assembly from an unlawful assembly; declaration of unlawful assembly requires a documented warning and dispersal order.

Force in crowd settings is applied by designated members under a supervisor's direction, not by individual initiative.

Arrest teams are pre-designated for crowd events; mass arrests require documentation of individual probable cause for each arrestee.

Community meetings are logged with issues raised and follow-up owners; unresolved issues are tracked to closure.

Bias-free policing requires documented reasonable suspicion independent of protected characteristics; stops are reviewed for disparity patterns.

A public information officer is the single point of release for incident information; other members refer media inquiries.

Business and resident outreach during a crime pattern includes written advisories and prevention guidance.

Protest liaison members are identified in advance and maintain contact with organizers to reduce friction.

Overtime is controlled through pre-approval, a documented operational justification, and periodic review against the command's allocation.

Budget categories include personnel services, overtime, equipment, and contractual services; transfers between categories require authority.

Staffing models convert call volume and average handling time into required patrol strength; the result is compared to available headcount.

Fleet and equipment readiness is tracked by preventive maintenance intervals and downtime; a vehicle out of service is logged and replaced.

Resource requests are justified by workload data, not by preference; the request states the metric, the gap, and the expected effect.

Payroll and timekeeping errors are corrected through documented adjustment, not by informal arrangement between supervisor and member.

Records retention schedules govern how long reports, recordings, and logs are kept; destruction outside schedule is prohibited.

Audit findings require a written corrective action plan with a responsible member and a completion date.

Ethical decisions are tested against legality, Department policy, and public trust; a lawful act can still violate policy.

A leader's accountability is upward and downward: the commander answers for the unit's conduct and for the unit's support of its members.

The duty to intervene requires a member to act when another member uses excessive force, and to report the conduct.

Integrity systems include audits, integrity tests, and complaint review; the goal is deterrence and detection, not entrapment.

Fair and impartial treatment is measured by outcomes across groups; a disparity is investigated, not dismissed as perception.

A supervisor who observes misconduct must document and report it; informal correction is permitted only for minor, correctable conduct.

Conflicts of interest are disclosed in writing; recusal applies when a member has a personal relationship with a party to a case.

Leadership development is documented through assignments, evaluations, and formal training records.

Commanders set measurable objectives for their commands and review performance against them at fixed intervals.

Delegation transfers the task, not the accountability; the commander remains answerable for delegated decisions.

A command climate survey measures member trust and reporting willingness; results are acted on with a written plan.

Succession planning identifies members ready for promotion and assigns developmental tasks before vacancies occur.

Recognition programs are tied to documented performance, not to visibility alone.

A commander's response to a critical incident includes member support, family notification, and a review of tactics.

Ethical tone is set by what a commander tolerates; unaddressed minor violations predict larger integrity failures.

Communication with the community after a controversial incident requires factual accuracy, timeliness, and a stated corrective path.

Capital requests are separated from operating requests; capital items require a multi-year justification and an asset lifecycle plan.

Cost per call and cost per arrest are derived metrics used to compare deployment options; both depend on accurate timekeeping.

Grant funds carry conditions on use, reporting, and matching contribution; unspent funds revert on the grant's schedule.

Resource reallocation during a crime pattern shifts personnel from low-demand tours to high-demand tours with documented rationale.

Equipment replacement is scheduled against failure data and warranty terms, not against the calendar alone.

Facility and infrastructure deficiencies are reported through the command's capital and maintenance channels with photographs and cost estimates.

Budget variance is reviewed monthly; a variance beyond threshold requires a written explanation and a corrective plan.

Contract and procurement actions follow the Department's purchasing rules; splitting a purchase to avoid a threshold is prohibited.

The incident commander's first written objective is life safety, then incident stabilization, then property preservation.

A command transition is documented with a briefing that covers objectives, resources, hazards, and casualty status.

Multi-agency response requires a common operating picture; the planning section produces the incident action plan for each operational period.

Resource ordering flows through logistics; freelancing by outside units is redirected to staging.

Media briefings are scheduled and scripted from verified facts; unverified casualty figures are not released.

Demobilization is planned, not improvised; units are released in the order set by the incident action plan.

Recovery phase begins before demobilization and includes member support, evidence preservation, and site restoration.

A unified command disagreement is resolved by the agency with jurisdiction over the specific function, recorded in the command log.

Major case management assigns a case commander, a lead detective, and a dedicated canvass and video unit.

A task force charter states membership, authority, information-sharing rules, and the lead agency.

Forensic requests are prioritized by evidentiary value and time sensitivity; DNA and digital evidence have different turnaround constraints.

Witness reliability is assessed by opportunity to observe, consistency, and corroboration; a single eyewitness identification is treated with caution.

Case review boards examine unsolved major cases at fixed intervals and record new leads and assignments.

Digital evidence requires hash verification at acquisition and documented storage to preserve integrity.

Prosecution coordination includes early charging conferences and a shared theory of the case.

Case files for major incidents are secured with access logs; unauthorized access is a reportable integrity event.

A supervisor reviews an arrest for probable cause, offense classification, and completeness of the charging documents before arraignment.

Searches conducted by subordinates are reviewed for consent voluntariness, scope, and documentation.

Lineup and photo array procedures must be blind or blinded and documented; suggestive procedures risk suppression.

Statements taken in custody are reviewed for Miranda compliance and for voluntariness under the totality of circumstances.

Evidence suppression rulings are tracked; a pattern of suppression in a unit indicates a training deficiency.

Juvenile arrests trigger separate custody, notification, and interrogation rules; a supervisor confirms compliance.

Domestic violence arrests follow mandatory-arrest rules where applicable; the victim's preference does not override statutory duty.

Search warrant returns must be filed within the time set by law; late returns are documented and explained.

A sergeant's field visit is documented with time, location, and observation; unverified post checks do not satisfy supervision requirements.

Radio discipline is enforced: unit identification, priority traffic, and no unauthorized chatter on the dispatch channel.

Vehicle stops are reviewed for articulated reasonable suspicion and for the duration of the stop relative to its purpose.

Use-of-force reviews are completed within the period set by directive; delay weakens the review and the defense of the member.

Complaint intake at the field level is documented and forwarded; a supervisor does not screen out a complaint.

Officer assignment rotation limits fatigue; consecutive night tours and extended overtime are tracked and capped.

Equipment inspections cover firearm, radio, body-worn camera, and less-lethal devices before deployment.

A supervisor's activity log is the record of accountability and is subject to audit.

Public order planning begins with a permit and legal review, an intelligence assessment, and a resource plan.

Rules of engagement for crowd events are briefed to every member before deployment and are uniform across the formation.

Arrest processing for mass arrests uses a designated processing site with documented individual paperwork.

Community advisory councils meet on a set schedule and produce minutes with action items.

Language access and disability accommodation are planned for public meetings and for emergency notifications.

Crime prevention through environmental design is applied in partnership with residents and property owners.

Public trust is measured by complaint rates, survey results, and reporting willingness; each is reviewed at command level.

Post-incident community communication includes what happened, what is being reviewed, and how to submit information.

A commanding officer implements a new patrol guide entry through a written command plan: training, effective date, and audit method.

Command audits sample reports and recordings against directive requirements; findings are recorded and tracked.

A directive change that affects another command requires coordination before the effective date.

Member training records are maintained at command level and verified before a member is assigned to a specialized function.

Court appearances and subpoenas are tracked; failure to appear is reported and addressed through the disciplinary process.

Confidentiality of sealed records and juvenile records is enforced by access control and audit.

A command's written orders cannot conflict with the patrol guide; a conflict is resolved in favor of the Department directive.

Annual command self-assessment documents compliance, deficiencies, and corrective actions.

Command discipline is a documented, non-court sanction for minor violations; the member's rights and the appeal path are stated in the notice.

Formal charges require specification of the rule violated, the conduct, and the date; vague charges are dismissed.

Suspension beyond thirty days requires the authority set by law and Department procedure.

Members have a right to representation in disciplinary proceedings; the choice is the member's.

Integrity testing requires supervisory and legal approval and documented probable cause of corruption.

Off-duty conduct is chargeable when it impairs the member's ability to perform or brings discredit on the Department.

Reporting obligations extend to arrests of members, domestic incidents, and orders of protection.

A member's medical and personnel records are confidential and released only through authorized channels.

Overtime is coded to the operation that generated it; uncoded overtime obscures true cost and cannot be audited.

Sick leave abuse review compares usage patterns against the command average and against the member's own history.

Light-duty and restricted-duty assignments are tracked against medical documentation and reviewed at set intervals.

Promotion eligibility depends on examination score, seniority, and evaluation history; each is verified before a list is used.

Timekeeping corrections require documentation of the error and the correct entry; a supervisor signs the adjustment.

Training hours are budgeted and tracked separately from operational overtime.

Vacancy management balances overtime cost against the cost of holding a position open.

Personnel records retention follows the Department's schedule; destruction requires authorization.

A field leader models the standard: uniform, demeanor, and procedural compliance are observed by subordinates.

Corrective feedback is delivered privately and specifically, with the standard cited and a follow-up date set.

A leader documents both commendable and deficient performance; a file with only deficiencies is not credible.

Ethical dilemmas are escalated when the answer is not clear; a leader does not resolve a policy conflict informally.

Fairness in assignments is demonstrated by a written rotation and by disclosure of how posts are allocated.

A leader who witnesses an ethical breach reports it through the chain of command and documents the report.

Member support after a traumatic incident includes peer support referral and a follow-up contact.

Recognition is specific and timely; generalized praise does not reinforce the behavior.

A detective supervisor reviews each assigned case within a set interval and records the review in the case file.

Case screening removes cases with no solvability factors; the decision and rationale are recorded.

Evidence audits compare the property log to the physical inventory at set intervals; discrepancies are investigated.

Informant payments require documentation of the amount, the purpose, and the approving authority.

Surveillance operations require a written plan, a cover team, and a communications plan.

Search warrant applications are reviewed by a supervisor for probable cause and scope before submission.

Case clearance rates are reviewed against the command's historical baseline, not against other commands.

A cold case review re-examines physical evidence for forensic advances and re-interviews available witnesses.

A hazard identification and risk assessment ranks hazards by likelihood and consequence; the ranking drives planning.

Exercise design includes a stated objective, an evaluation plan, and a documented after-action report.

Continuity of operations identifies essential functions and alternates for each; the plan is tested.

Emergency notifications use multiple channels; a single channel fails when power or network is lost.

Resource inventories list personnel, equipment, and facilities with contact information and availability.

A staging area is located upwind, away from the hazard, with a single access route controlled by a member.

The incident action plan covers one operational period and is briefed before the period begins.

Mutual aid agreements state the resources, the cost-sharing, and the authority for requesting aid.

Victim and witness cooperation depends on trust; a single point of contact is assigned for serious cases.

Community notification of a crime pattern includes the location, the method, and prevention steps.

Hate crime investigations require documentation of bias indicators and coordination with the bias unit.

Language access for victims is arranged at first contact; delay loses cooperation.

Complaint mediation programs resolve minor complaints without formal charges where both parties agree.

Youth engagement programs are measured by participation and by referral outcomes.

Faith and business leaders are engaged before an incident, not only during one.

Public information releases balance investigative integrity against the public's need for accurate information.

Reports are accurate, complete, and written in the first person; opinions are separated from observations.

Corrections to a filed report are made by supplemental report, never by altering the original.

Body-worn camera activation requirements are set by directive; failure to activate is documented and reviewed.

Stop reports require articulated reasonable suspicion for each person stopped.

Domestic incident reports require documentation of injuries, statements, and prior history.

Missing person reports are taken without delay; there is no waiting period.

Property reports distinguish lost, found, and stolen property; classification affects investigation and return.

Records requests are processed through the records access unit; members do not release reports directly.

Force must be objectively reasonable, necessary, and proportional to the threat.

Deadly force is limited to situations where the member reasonably believes it is necessary to prevent death or serious injury.

A member must intervene to stop another member's excessive force and must report it.

Medical aid is rendered after force is applied; the member requests EMS and documents the request.

Force reports are reviewed by the chain of command and by the force investigation unit for serious force.

Less-lethal devices require training currency and are used under the directive's targeting rules.

Firearm discharges, including unintentional discharges, are reported and investigated.

Force data is analyzed for patterns by member, unit, and assignment.

Technology acquisitions require a needs statement, a security review, and a lifecycle cost estimate.

Data systems holding Department records require access controls, audit logs, and retention rules.

Facility maintenance requests are prioritized by health and safety impact, then by cost.

Body-worn camera storage is a recurring cost; retention periods drive the storage requirement.

Radio and communications upgrades are planned with interoperability with partner agencies.

Asset inventory reconciles physical equipment to the records system at set intervals.

Vendor contracts include performance terms and termination provisions.

Cybersecurity incidents are reported through the Department's incident response channel.

Chain of custody documentation must be continuous; a gap is explained by testimony, not by assumption.

Hearsay is generally inadmissible, but exceptions include excited utterance, present sense impression, and business records.

Identification testimony is challenged on suggestiveness; the review asks whether the procedure was unnecessarily suggestive.

Expert testimony requires qualification and a reliable method; the supervisor confirms the analyst's credentials.

Privileged communications, including certain victim and medical communications, are protected and require legal review.

Preservation letters are sent to potential holders of evidence, including businesses with video.

Testimony preparation includes a review of the reports and the evidence, not rehearsal of a script.

Brady obligations require disclosure of exculpatory information to the prosecutor.

Morale is measured by turnover, sick leave, complaints, and survey results; each is tracked at command level.

Recognition is distributed across tours and units, not concentrated among visible assignments.

A supervisor's intervention on minor misconduct prevents escalation and is documented.

Assignments are rotated to develop members and to distribute hardship equitably.

Grievances are processed through the contractual steps; a supervisor does not promise outcomes outside the process.

Peer support and employee assistance referrals are confidential and voluntary.

A member's return from extended leave includes a fitness-for-duty review and a reintegration plan.

Exit interviews capture reasons for transfer or separation and inform command practice.

A commander's ethical obligation includes correcting a directive that produces unjust or unlawful outcomes.

Transparency in discipline is balanced against confidentiality; the command communicates the standard, not the member's private details.

Integrity audits are announced in policy but unannounced in execution.

A commander reviews complaint patterns by unit and by supervisor, not only by individual member.

Conflicts of interest in procurement and in personnel decisions are disclosed and recused.

Ethical culture is assessed by whether members report misconduct without fear of retaliation.

Retaliation against a reporter is a separate and serious violation.

A commander's public statements are factual, timely, and consistent with the Department's position.

The incident commander sets priorities and delegates authority in writing when the incident spans operational periods.

A tactical pause is used when information is incomplete; the commander documents the reason and the duration.

Hostage and barricade incidents require negotiation before tactical action where life is not in immediate danger.

Active shooter response prioritizes immediate intervention over perimeter containment.

Casualty collection points are established and communicated to responding units.

A family assistance center is established for mass casualty incidents with notification and support functions.

The command post is co-located with the fusion of intelligence and operations, not with the media.

Demobilization and recovery costs are tracked through the finance section from the first operational period.

Charging decisions are made with the prosecutor; the investigator provides the facts and the evidence inventory.

Grand jury presentations require organized exhibits and a witness plan.

Discovery obligations require complete production of investigative materials to the prosecutor.

Case conferences before trial identify weaknesses and additional investigative needs.

Witness protection and intimidation issues are reported immediately and assessed for safety planning.

Court appearances are tracked; a missed appearance is reported to the command and to the prosecutor.

Sentencing information requests are answered with documented prior history and victim impact.

Post-conviction information, including new evidence, is routed to the prosecutor and the reviewing unit.

Permitted assemblies are facilitated; restrictions are limited to time, place, and manner and must be content-neutral.

A dispersal order is given with time to comply, an audible warning, and an identified egress route.

Journalists are not arrested for reporting; credentials and equipment are respected.

Legal observers are permitted to observe and are not obstructed.

Arrest processing for assembly-related offenses documents the specific conduct and the warning given.

Crowd control formations are briefed on the rules of engagement and on the designated use-of-force supervisors.

Intelligence collection on lawful assembly requires legal review and documented predication.

Post-event review compares the plan to the outcome and records changes for the next event.

Performance measures include response time, clearance rate, complaint rate, and overtime per officer.

Response time is measured from dispatch to arrival and is reported by priority level.

Clearance rate is arrests plus exceptional clearances divided by reported offenses.

Complaint rate is complaints per officer per year, compared against the command baseline.

Overtime per officer is compared against the allocation and against the command average.

Data quality is verified by sampling reports against the records system.

A metric used for evaluation is defined in writing and applied consistently across periods.

A performance review states the metric, the target, the result, and the corrective action.

Mobilization levels are set by the Department and communicated through the chain of command; members report as directed.

Specialized units are requested through the operations desk, not directly by a field supervisor.

Aviation, marine, and canine support requests state the location, the need, and the communications channel.

Emergency service unit response is requested for barricades, high-risk warrants, and rescue.

A mobilization recall is documented with the members who reported and the time of report.

Equipment issued for a mobilization is inventoried and returned.

A specialized unit's on-scene commander coordinates with the incident commander and does not assume command unless directed.

Mutual aid resources are briefed on rules of engagement and on the communications plan.

Criminal history records are released only for authorized purposes; unauthorized access is a chargeable offense.

Sealed records are not disclosed except by court order.

Body-worn camera recordings are released through the records access process and applicable law.

Members do not post Department information or images on social media.

Informant identity is protected and disclosed only as required by law and with supervisory approval.

Medical and personnel information is confidential and shared on a need-to-know basis.

A leak of investigative information is investigated as an integrity matter.

Requests from other agencies for Department records are routed through the legal bureau.

Mentoring pairs an experienced member with a new member and sets specific developmental goals.

Field training evaluation uses standardized observation and documented remediation.

Leadership development includes rotational assignments across patrol, investigations, and administration.

Feedback is timely, specific, and tied to an observable standard.

A development plan states the goal, the activity, the measure, and the review date.

Promotional preparation includes examination study, interview practice, and documented performance.

A mentor does not shield a probationary member from accountability; the mentor reports deficiencies.

Program effectiveness is measured by retention, promotion rates, and evaluation outcomes.

A warrant must describe the place to be searched and the items to be seized with particularity.

Consent must be voluntary and may be limited in scope; the member documents who consented and what was said.

Automobile exception permits a search of a vehicle when probable cause exists that it contains evidence or contraband.

Inventory searches follow a written policy and are not a pretext for investigative search.

Exigent circumstances include hot pursuit, destruction of evidence, and immediate danger to life.

Plain view requires lawful presence, lawful access, and immediately apparent incriminating character.

A protective sweep is limited to spaces where a person could hide and to the justification for the sweep.

Digital devices require particularized warrants; the scope of the search must be stated.

A supervisor at a line-of-duty death notifies the family in person with a chaplain and a member of the command.

Member involved in a shooting is removed from the scene and provided with peer support and representation.

Force investigation is conducted by a separate unit; the involved member's supervisor preserves the scene and the evidence.

A critical incident stress debriefing is offered after a traumatic event and is voluntary.

Family liaison is assigned for a member seriously injured or killed in the line of duty.

The command documents the support provided and the follow-up contacts.

Return to duty after a critical incident includes a fitness-for-duty assessment and a gradual reintegration.

A member's personnel record of the incident is handled under the confidentiality rules.

Crime prevention partnerships are built on shared data, agreed objectives, and a written plan.

Business improvement districts coordinate camera access and reporting with the precinct.

Residential watch programs are trained on observation and reporting, not on intervention.

Environmental design measures include lighting, sightlines, and access control.

Youth programs are evaluated by participation, referrals, and recidivism.

Victim services coordination includes notification, safety planning, and referral.

Partnership meetings produce action items with owners and dates.

Public trust is strengthened by consistent follow-through on community-reported problems.

A resource request states the problem, the data, the options, the cost, and the recommended option.

Cost-benefit analysis compares options on total cost and on expected outcome, not on unit price alone.

A pilot program has a defined period, a measure, and a decision rule for continuation.

Risk assessment for a plan identifies the failure modes and the mitigation for each.

Decision records state who decided, what was decided, and the basis for the decision.

Data dashboards are refreshed on a set schedule and reconciled to source systems.

A plan's assumptions are stated explicitly and reviewed when conditions change.

Lessons learned from prior plans are incorporated and cited.

The communications plan assigns channels for command, operations, and logistics and lists the interoperability channels.

Intelligence is fused at the command post and verified before it drives tactical action.

A single source of unverified information is corroborated before it is acted on.

Public information releases are coordinated with the incident commander and the public information officer.

Interoperability failures are logged and reported for correction.

A common operating picture is maintained with unit locations, hazards, and resource status.

Redundant communications include cellular, satellite, and runner where systems fail.

Post-incident communications review identifies gaps and assigns corrections.

Cold case review begins with a full file review and an evidence inventory.

Forensic re-testing is prioritized by evidence type and by the likelihood of a probative result.

DNA database hits require confirmation testing before investigative action.

Familial searching requires legal review and policy authorization.

Witness re-interviews assess memory decay and any prior statements.

A cold case plan documents the theory, the leads, and the assigned investigator.

Victim family communication is maintained at set intervals with a single point of contact.

Case closure decisions are reviewed by a supervisor and recorded with the rationale.

An audit plan states the scope, the sample, the criteria, and the reporting method.

Sampling methods are documented; a convenience sample does not support a command-wide conclusion.

Findings are rated by severity and assigned a corrective action with an owner and a date.

Follow-up audits verify that corrective action was implemented.

Audit records are retained under the records schedule.

A finding that involves misconduct is referred to the disciplinary process.

Audit results are reported to the commander and to the oversight body as required.

A repeat finding indicates a control failure, not an isolated error.

An off-duty member who takes police action identifies as a police officer and requests on-duty resources.

Off-duty firearm carry requires compliance with the Department's firearm regulations.

An off-duty arrest is reported to the command as required by directive.

Alcohol use while armed is prohibited; the member does not carry a firearm while impaired.

A member's fitness for duty is assessed when conduct or condition impairs performance.

A member who is the subject of an order of protection reports it as required.

Outside employment that creates a conflict is prohibited without written approval.

A member's personal business activity may not use Department resources or the member's official position.

Procedural justice has four elements: voice, neutrality, respect, and trustworthy motives.

A stop explained to the person stopped increases compliance and reduces complaints.

Legitimacy is measured by willingness to report crime and to cooperate as a witness.

A command's response to a complaint includes an explanation of the process to the complainant.

Transparency about force and stops builds trust when the data is accurate and contextualized.

A commander's public explanation of a policy change states the reason and the expected effect.

Community trust is damaged by inconsistency between stated values and observed conduct.

Restoring trust requires specific corrective action and sustained follow-through.

Arrest processing includes fingerprinting, photographing, and a criminal history check.

Arraignment occurs within the time set by law; delay requires documented justification.

A defendant's right to counsel attaches at critical stages; interrogation after counsel is requested stops.

Bail decisions are made by the court; the Department provides the information required.

A prisoner's medical needs are assessed at intake and referred for treatment.

A juvenile's custody and notification follow separate statutory rules.

Escape and resisting arrest are separate offenses with their own elements.

A warrant check is completed before release on a summons or desk appearance ticket.

Crime analysis identifies patterns by time, location, and method and informs post assignment.

Hot spot deployment concentrates resources where crime is concentrated and is evaluated for displacement.

CompStat-style review examines current and prior period data and holds commanders accountable for plans.

Response time targets are set by priority; low-priority calls may be handled by appointment or phone.

Call diversion reduces patrol load and is evaluated for outcome and satisfaction.

Deployment changes are documented with the rationale and the evaluation date.

Displacement is measured by comparing adjacent areas before and after deployment.

A deployment plan states the objective, the resources, the duration, and the measure.

A grant application states the need, the plan, the budget, and the evaluation method.

Matching requirements are identified before acceptance; an unfunded match is a budget liability.

Grant funds are tracked separately and reconciled to the grant's reporting schedule.

Allowable costs are defined by the grant terms; unallowable costs are not charged.

Performance reporting is submitted on time with verified data.

A grant-funded position has a sustainability plan for the period after the grant ends.

Audit findings on grants are corrected and reported to the funder.

Equipment purchased with grant funds follows the funder's disposition rules.

The after-action process includes participant feedback, a draft report, and a corrective action plan.

Corrective actions are assigned an owner, a date, and a verification method.

Recovery includes member support, evidence preservation, and restoration of services.

A hot wash is conducted immediately after the incident and is separate from the formal after-action report.

Lessons learned are incorporated into plans, training, and exercises.

Recovery costs are documented for reimbursement and for future planning.

Community recovery communication states what happened and what is being done.

An after-action report that identifies no deficiencies is reviewed for rigor.

The public information officer is the single release point for incident information.

A release states verified facts, the time of the release, and the source.

Unverified casualty figures and suspect identities are not released.

A suspect's photograph is released under the Department's criteria and with supervisory approval.

Social media is used for advisories and for information requests, with the same accuracy standard.

Corrections are issued promptly when a release is wrong.

Media access at an incident is managed at a designated point away from operations.

A member refers media inquiries to the public information officer and does not comment independently.

A member identifies by name and shield when acting in an official capacity, unless identification would compromise an investigation.

A stop is documented with the time, location, and articulated reason.

A search requires consent, a warrant, or an exception; the member states the basis.

A complaint is accepted and forwarded; the member does not discourage a complaint.

A person's request for a supervisor is honored when practicable and documented.

Language access is provided through the language line or a qualified interpreter.

A member's demeanor is professional and neutral; provocation does not justify discourtesy.

Body-worn camera activation is required for enforcement contacts under the directive.

Property is vouchered at the time of seizure or as soon as practicable, with a description and a value.

Narcotics, firearms, and currency require separate handling and a supervisor's verification.

Chain of custody records each transfer with date, time, and member.

Evidence storage requires access control and an inventory audit at set intervals.

Disposal of evidence requires legal authorization and documentation.

A discrepancy in the property log is investigated as an integrity matter.

Return of property to an owner requires identification and a receipt.

Photographs of perishable or bulky evidence are taken before disposition.

A decision framework states the problem, the facts, the options, the criteria, and the choice.

Ethical tests include legality, policy, consequences, and the publicity test.

A decision made under time pressure is documented with the information available at the time.

A leader distinguishes a policy question from an operational question and routes it accordingly.

A decision that affects a member's rights includes notice and an appeal path.

A leader reviews a decision after implementation and records the outcome.

A decision that conflicts with policy is escalated, not made informally.

A leader's reasoning is recorded so it can be reviewed and defended.

A victim's first contact includes safety planning, rights information, and a contact number.

Witness intimidation is reported immediately and assessed for protection.

Victim cooperation is maintained through a single point of contact and regular updates.

Language access and accommodation are arranged at first contact.

A victim's preference does not override a mandatory arrest requirement.

Witness statements are recorded and reviewed for consistency and corroboration.

Victim impact information is documented for prosecution and sentencing.

A victim's confidentiality is protected under the applicable law and Department policy.

Required patrol strength is derived from call volume, average handling time, and the percentage of time on calls.

Shift schedules balance coverage against fatigue and against contractual rules.

Overtime is reduced by matching staffing to demand by tour and day.

Absence forecasting uses historical rates to plan replacement coverage.

A staffing request states the gap, the impact, and the cost of each option.

Scheduling changes are communicated in advance and documented.

Minimum staffing levels are maintained for officer safety.

A staffing plan is reviewed when call volume or the crime pattern changes.

Special event planning begins with a permit review, a threat assessment, and a resource estimate.

A written operations order assigns posts, communications, and contingency actions.

Crowd density is monitored and access is closed when capacity is reached.

Medical and fire assets are pre-positioned for large events.

A weather contingency plan is included for outdoor events.

A command post and a media point are established before the event begins.

Post-event review compares the plan to the outcome and records changes.

Costs are tracked for reimbursement and for future planning.

School liaison programs define the role of the officer and the limits of school discipline authority.

A school incident is documented and coordinated with school administration.

Youth arrests are processed under separate rules with notification to a parent or guardian.

Diversion programs are used for eligible first offenses under written criteria.

Juvenile records are confidential and access is controlled.

A school threat assessment involves the school, the family, and the Department.

Youth engagement is measured by participation and by referral outcomes.

A school's emergency plan is coordinated with the precinct's response plan.

Emergency vehicle operation requires due regard for safety and compliance with vehicle and traffic law.

A pursuit is authorized only under the Department's pursuit policy and is terminated when the risk exceeds the need.

A pursuit is reported and reviewed by a supervisor; the review documents the justification and the termination decision.

A vehicle collision involving a Department vehicle is reported and investigated.

Vehicle inspections are completed before tour and deficiencies are reported.

A vehicle out of service is logged and replaced.

Emergency lights and sirens are used as required by the vehicle and traffic law.

A member's driving record is reviewed and remedial training is assigned when indicated.

Sick leave is reported before the tour begins under the Department's procedure.

A medical documentation requirement applies after a set number of consecutive sick days.

Leave requests are submitted in advance and approved by the commanding officer.

Patterns of absence around weekends and holidays are reviewed.

Unauthorized absence is documented and addressed through the disciplinary process.

Return from extended leave requires a fitness-for-duty clearance where indicated.

Leave balances are tracked and reported to the member.

A member's leave record is confidential and released only through authorized channels.

An accountability system defines the standard, the measure, the review, and the consequence.

Performance reviews are based on documented evidence, not on impression.

A commander reviews the unit's complaint, force, and discipline data at set intervals.

A finding of misconduct results in a proportionate and documented consequence.

A member's right to notice and a hearing is honored in every disciplinary action.

An accountability system is evaluated for fairness and for consistency across units.

A commander corrects a systemic problem rather than attributing it to individuals alone.

A public report of accountability data is accurate and contextualized.

Larceny requires trespassory taking and carrying away of property with intent to deprive.

Robbery is larceny with force or the threat of immediate force.

Assault requires intent to cause physical injury and causation of injury.

Homicide elements vary by degree and require proof of intent, causation, and in some degrees, premeditation.

Criminal possession of a weapon requires possession with intent to use unlawfully or under specified circumstances.

Controlled substance offenses turn on possession, quantity, and intent to sell.

Arson requires intentional damage to a building by fire or explosion.

Forgery requires a false instrument with intent to defraud.

In-service training is tracked by member and by topic; currency is verified before assignment.

Firearms qualification is required at set intervals; failure results in remedial training and restricted duty.

Defensive tactics and less-lethal training are refreshed on a schedule.

Scenario-based training is evaluated against stated performance objectives.

A training record is retained under the records schedule.

A new directive triggers training before the effective date.

Readiness is assessed by equipment, training currency, and staffing.

A training gap is documented and scheduled, not deferred indefinitely.

A controlled buy requires a documented plan, searched funds, and surveillance.

Informant reliability is documented and corroborated before reliance.

Search warrant applications for narcotics state the basis for the location and the items.

Quantity and packaging support an inference of intent to sell.

Undercover operations require supervisory approval and a safety plan.

Confidential funds are accounted for with receipts and supervisory approval.

A buy-walk is used to develop a larger case and is documented.

Case integrity requires that evidence be secured and the chain of custody maintained.

Overtime requires pre-approval except in an emergency, which is documented after the fact.

Overtime is coded to the operation and reviewed against the allocation.

A command's overtime is analyzed by cause: backfill, court, special event, and investigation.

Backfill overtime is reduced by scheduling and by absence management.

Court overtime is tracked and reconciled to subpoenas.

Overtime trends are reported monthly with a corrective plan when over allocation.

A member's overtime is monitored for fatigue and for policy limits.

Overtime records are audited against timekeeping and payroll.

Threat information is assessed for credibility and is shared through the fusion center.

A suspicious package response establishes a perimeter and requests the bomb squad.

A terrorism incident requires unified command and a joint information center.

The response plan includes evacuation routes, casualty collection, and family reunification.

Intelligence sharing follows the legal and policy rules for the receiving agency.

A threat assessment informs protective measures for a specific event or location.

Public communication is coordinated and avoids unverified attribution.

Post-incident review examines intelligence, response, and coordination.

Quality-of-life enforcement is balanced with diversion and social service referral.

A homeless outreach contact documents the services offered and the referral.

Encampment clearance follows a written plan with notice and service coordination.

Enforcement decisions consider health and safety and the availability of shelter.

A complaint about a quality-of-life condition is tracked to closure.

Partnerships with social service agencies are formalized with a point of contact.

Data on outreach and referrals informs the command's plan.

A person's civil rights are respected in every contact.

A major incident is reported to the operations desk and to the duty chief.

Notification lists are current and tested at set intervals.

A missing person report is taken without delay and broadcast.

An Amber Alert requires the statutory criteria and supervisory approval.

A hazardous materials incident requires isolation and notification of the fire department.

A bomb threat is documented and the response follows the Department's protocol.

A critical incident notification includes the location, the nature, and the resources requested.

Notification records are retained and reviewed after the incident.

Uniform standards are set by directive and are checked at roll call.

The shield is carried and displayed as required; loss is reported immediately.

The firearm is inspected and maintained; a malfunction is reported.

Body-worn cameras are worn and activated per directive.

Equipment issued to a member is inventoried and returned on separation.

Unauthorized equipment is prohibited.

A uniform or equipment deficiency is corrected before deployment.

Equipment loss or damage is reported and documented.

A briefing states the objective, the tasks, the resources, and the risks.

A leader confirms understanding by asking for a back-brief.

Feedback is specific, behavioral, and timely.

A difficult message is delivered privately and with the standard cited.

A leader listens for the concern behind a complaint.

Written communication is clear, brief, and free of ambiguity.

A leader's public message is consistent with the internal message.

Communication is evaluated by whether the receiver can act on it.

Digital evidence is acquired with a write-blocking method and hash verification.

Chain of custody records the device, the acquisition method, and the analyst.

A warrant for a device states the scope of the search and the data sought.

Cloud and third-party data require legal process to the provider.

Video evidence is preserved with a request letter and a copy.

Analysis is documented with the tool, the version, and the findings.

Storage of digital evidence requires access control and integrity verification.

Court presentation includes a qualified analyst and a clear explanation of the method.

Procurement follows the Department's purchasing rules and the applicable thresholds.

Splitting a purchase to avoid a threshold is prohibited.

A specification states the requirement, not a brand, unless justified.

A contract includes performance terms, delivery dates, and termination provisions.

Vendor performance is evaluated and documented.

Receipt of goods is verified against the order before payment.

A conflict of interest in procurement is disclosed and recused.

Contract records are retained under the records schedule.

Mass casualty triage sorts patients by urgency and available resources.

Casualty collection points are established and communicated.

Family reunification is coordinated with the medical examiner and hospitals.

A joint information center coordinates public information across agencies.

The medical examiner controls the scene of a fatality and the evidence.

Temporary morgue operations are established with the medical examiner.

Behavioral health support is offered to responders and survivors.

Recovery includes victim assistance and a review of the response.

Victim rights include notification, information, and participation in the process.

A victim's safety plan is developed at first contact.

Victim compensation information is provided.

A victim's contact information is protected.

Language access and accommodation are arranged.

A victim's decision to cooperate is respected and documented.

Victim services coordination includes referral to community providers.

Follow-up contact is maintained at set intervals.

Command discipline is documented with the violation, the sanction, and the appeal path.

Formal charges specify the rule, the conduct, and the date.

A member has the right to representation.

A grievance is processed through the contractual steps.

A suspension requires the authority set by law and procedure.

A disciplinary record is retained under the records schedule.

A member's disciplinary history is considered in promotion and assignment decisions.

A disciplinary action is reviewed for consistency with prior cases.

A member discloses a personal relationship with a party to a case and recuses.

Outside employment requires written approval and may not conflict with Department duties.

A member may not use the official position for personal benefit.

A gift or gratuity connected to the position is prohibited.

A financial interest in a Department contract is disclosed and recused.

A member may not represent a private party in a matter involving the Department.

A conflict is resolved in favor of the Department's interest.

A failure to disclose a conflict is a chargeable offense.

A leader in a crisis communicates presence, facts, and the plan.

Decisions are made with the information available and are documented.

A leader protects the team's psychological safety and supports those affected.

A leader coordinates with partners and does not act unilaterally.

A leader's public statements are accurate and timely.

A leader reviews the response and corrects the plan.

A leader recognizes members who performed well under pressure.

A leader's conduct under pressure sets the standard for the unit.

A surveillance plan states the objective, the teams, the communications, and the termination criteria.

Electronic surveillance requires legal authorization and a minimization plan.

A wiretap application requires a showing of necessity and a description of the communications sought.

Technical equipment is tested before deployment.

A surveillance log records the time, the location, and the observation.

A cover team is assigned and briefed.

A surveillance is terminated when it is compromised or unsafe.

Evidence from surveillance is preserved and documented.

Fleet readiness is tracked by preventive maintenance intervals and downtime.

A vehicle out of service is logged and replaced.

Fuel and maintenance costs are tracked by vehicle and by unit.

Facility deficiencies are reported with photographs and cost estimates.

A facility's security is assessed and corrected.

Space allocation is planned against staffing and function.

Capital requests include a lifecycle cost estimate.

Facility and fleet records are retained under the records schedule.

Command is established by the first-arriving supervisor and transferred with a briefing.

The incident commander sets objectives and delegates authority.

A command post is established away from the hazard and the media.

A staging area is established with a single access route.

Resource ordering flows through logistics.

A common operating picture is maintained.

A unified command is used when multiple agencies have jurisdiction.

Command decisions are recorded in the command log.

A public information release states verified facts and the time.

A correction is issued promptly when a release is wrong.

A suspect's photograph is released under the Department's criteria.

A community meeting is logged with issues and follow-up owners.

A complaint is accepted and forwarded.

A member refers media inquiries to the public information officer.

A public trust measure includes complaint rates and survey results.

A post-incident communication states what happened and what is being reviewed.

Records requests are processed through the records access unit.

A sealed record is not disclosed except by court order.

A criminal history record is released only for authorized purposes.

A body-worn camera recording is released through the records access process.

A member does not release a report directly.

A records retention schedule governs destruction.

A records access log is maintained.

An unauthorized access is a reportable integrity event.

Department resources are used for official purposes only.

A Department vehicle is used for official business and authorized travel.

A Department computer is used under the Department's acceptable use policy.

A member may not use the official position for personal benefit.

A Department database is accessed only for an authorized purpose.

A misuse of resources is a chargeable offense.

A resource use is documented and auditable.

A member reports a suspected misuse of resources.

An ethical culture is measured by reporting willingness and by the absence of retaliation.

A leader's conduct sets the standard more than a written statement.

A minor violation that is tolerated predicts a larger integrity failure.

A reporting channel is available and is trusted.

A retaliation against a reporter is a serious violation.

An ethical dilemma is escalated when the answer is not clear.

A leader recognizes ethical conduct publicly.

An ethical culture is reviewed at command level with data.

A case review examines the investigation, the evidence, and the charging decision.

A review records the findings and the corrective actions.

A case file is complete and organized for prosecution.

A quality review samples cases against a standard.

A deficiency is corrected and the correction is documented.

A case review board meets at set intervals.

A case review informs training needs.

A case review is retained under the records schedule.

A performance measure is defined in writing and applied consistently.

A target is set against a baseline and a trend.

A result is compared to the target and the variance is explained.

A corrective action has an owner and a date.

A performance review is documented and reported.

A metric is verified by sampling the source data.

A metric that drives the wrong behavior is revised.

A performance review includes qualitative evidence.

Logistics orders, tracks, and delivers resources.

A resource request states the kind, the quantity, and the location.

A staging area manages the check-in and the assignment of resources.

A resource status is tracked and reported to command.

A resource is demobilized in the order set by the incident action plan.

A cost is tracked by the finance section.

A resource shortage is reported to command and to the operations section.

A logistics record is retained for the after-action review.

A community meeting is scheduled and publicized in advance.

A meeting produces action items with owners and dates.

A community concern is tracked to closure.

A partnership is formalized with a point of contact.

A youth program is evaluated by participation and outcomes.

A business outreach includes prevention guidance.

A community survey measures trust and reporting willingness.

An engagement plan is reviewed and updated.

A subpoena is honored; a conflict is reported to the command.

A court appearance is documented in the activity log.

A member reviews the reports and the evidence before testifying.

A member testifies to observations and facts, not to opinion.

A member does not discuss testimony with another witness.

A missed appearance is reported to the command and the prosecutor.

A court overtime is tracked and reconciled.

A testimony record is retained under the records schedule.

A member reports a known violation of law or rule by another member.

A member reports an arrest of a member.

A member reports a domestic incident involving a member.

A member reports an order of protection involving a member.

A member reports a line-of-duty injury before end of tour.

A member reports a use of force.

A member reports a firearm discharge.

A failure to report is a chargeable offense.

A mentoring program pairs an experienced member with a new member.

A development plan states the goal, the activity, and the measure.

A succession plan identifies members ready for promotion.

A developmental assignment is documented.

A mentor reports deficiencies rather than shielding a member.

A program is evaluated by retention and promotion outcomes.

A leader identifies and develops talent.

A succession plan is reviewed at set intervals.

A case file is secured with access control.

A chain of custody is maintained for all evidence.

A discrepancy is investigated as an integrity matter.

A confidential informant's identity is protected.

A case decision is documented with the rationale.

A case review is conducted at set intervals.

A case file is retained under the records schedule.

An unauthorized access is a reportable event.

A resource request states the problem, the data, and the options.

A cost-benefit analysis compares total cost and expected outcome.

A pilot program has a defined period and a decision rule.

A reallocation is documented with the rationale.

A resource is tracked against the allocation.

A variance is explained and corrected.

A resource plan is reviewed when conditions change.

A resource decision is recorded for review.

A hazard assessment ranks hazards by likelihood and consequence.

An exercise has an objective and an evaluation plan.

An after-action report identifies deficiencies and corrective actions.

A corrective action has an owner and a date.

A plan is tested and revised.

A continuity plan identifies essential functions and alternates.

A notification list is current and tested.

A plan is coordinated with partner agencies.

A permitted assembly is facilitated.

A dispersal order is given with time to comply and an egress route.

A journalist is not arrested for reporting.

A legal observer is permitted to observe.

An arrest team is pre-designated.

A mass arrest documents individual probable cause.

A rule of engagement is briefed before deployment.

A post-event review records changes.

A command audit samples reports against directive requirements.

A finding is rated by severity.

A corrective action has an owner and a date.

A follow-up audit verifies implementation.

A repeat finding indicates a control failure.

A finding involving misconduct is referred.

An audit result is reported to the commander.

An audit record is retained.

A gift connected to the position is prohibited.

A gratuity is prohibited regardless of value.

A member may not use the position for personal benefit.

A conflict of interest is disclosed and recused.

A member may not accept payment for an official act.

A member reports a suspected violation.

A violation is a chargeable offense.

A disclosure is documented.

A team goal is specific and measurable.

A role is defined and communicated.

A performance review is based on evidence.

A developmental task is assigned and reviewed.

A recognition is specific and timely.

A team's morale is measured and addressed.

A leader develops the team's capability.

A team's performance is reviewed at set intervals.

An investigative plan states the theory, the leads, and the assignments.

A lead is assigned and tracked.

A briefing interval is set.

A decision is recorded in the file.

A resource request is justified.

A case is reviewed at set intervals.

A plan is revised when information changes.

A plan is retained in the case file.

A budget is executed against the allocation.

A variance is reviewed monthly.

A transfer between categories requires authority.

An overtime is coded and reviewed.

A procurement follows the purchasing rules.

A grant is tracked separately.

An audit finding is corrected.

A budget record is retained.

An incident action plan covers one operational period.

An objective is specific and measurable.

A plan is briefed before the period begins.

A plan is revised for the next period.

A resource is ordered through logistics.

A cost is tracked by the finance section.

A plan is retained for the after-action review.

A plan is coordinated with partner agencies.