PNP-SOSIA Private Detective cheat sheet

RA 11917, the Private Security Services Act of 2022, repeals RA 5487 and governs security guards, private detectives, security agencies, and training institutions under the PNP-SOSIA.

RA 5487, the Private Security Agency Law of 1969, required a PNP license to operate a security agency and a separate license to exercise the security profession.

A security agency must hold a valid License to Operate; each security guard or private detective must hold a separate license to exercise the profession.

Practicing private security services without a license is unlawful and exposes the person and agency to administrative, civil, and criminal liability.

Security guard licensing requires Filipino citizenship, good moral character, no conviction for a crime involving moral turpitude, and completion of required training.

Private detective applicants must satisfy training, experience, and examination requirements set by the PNP-SOSIA and the governing board.

Agencies must comply with RA 10591 on firearms, labor laws, record-keeping, and reportorial requirements to retain their licenses.

The IRR of RA 11917 is issued by the PNP-SOSIA; violations can lead to suspension, revocation, or non-renewal of licenses.

A felony is an act or omission punishable by the Revised Penal Code, committed with dolo (intent) or culpa (negligence).

Attempted: overt act but not all elements; frustrated: all acts done but crime not produced by a cause independent of the will; consummated: all elements present.

Justifying circumstances negate criminal liability: self-defense, defense of stranger, state of necessity, fulfillment of duty, and obedience to lawful order.

Exempting circumstances negate dolo or culpa but may create civil liability: imbecility, minority, accident, irresistible force, and insuperable cause.

Conspiracy exists when two or more persons agree to commit a felony and decide to commit it; it may be inferred from concerted acts.

A complex crime arises when one act constitutes two or more grave or less grave felonies, or when one offense is a necessary means for another; the penalty is that of the most serious crime.

Crimes punishable by death, reclusion perpetua, or reclusion temporal prescribe in 20 years; other periods depend on the penalty.

Special laws such as RA 9165, RA 10591, RA 9262, and BP 22 define offenses and penalties outside the Revised Penal Code.

A warrantless arrest is lawful when the person is caught in flagrante delicto, when a crime has just been committed and the arresting officer has personal knowledge, or when the person is an escaped prisoner.

A search warrant requires probable cause personally determined by the judge after examination under oath of the complainant and witnesses.

Warrantless searches include search incident to lawful arrest, consent, plain view, exigent circumstances, moving vehicle, and stop-and-frisk.

Custodial investigation rights: remain silent, have counsel, be informed of rights; waiver must be in writing and made with counsel.

RA 9165 Section 21, as amended by RA 10640, requires inventory and photography of seized drugs in the presence of the accused or representative, an elected public official, and a media or DOJ representative.

Evidence must be relevant and not excluded by law; the three types are object, documentary, and testimonial evidence.

Hearsay is an out-of-court statement offered for its truth and is inadmissible unless a recognized exception applies.

Proof beyond reasonable doubt is required in criminal cases; preponderance of evidence governs civil cases.

First responder duties: secure the crime scene, preserve evidence, assist victims, record observations, and log entry and exit without contaminating the scene.

Case build-up links suspect, victim, scene, and evidence, and proves each element of the offense with admissible evidence.

Entrapment gives an opportunity to a person already inclined to commit a crime and is not a defense; inducement creates criminal intent and may be a defense.

A buy-bust operation requires pre-operation coordination, marked buy-bust money, surveillance, arrest, and immediate inventory of seized evidence.

Miranda warnings must precede custodial interrogation; a confession obtained without counsel is inadmissible.

Witness statements are taken separately, in writing, signed, and must state the date, time, place, and personal knowledge of the witness.

Evidence handling requires labeling, sealing, chain-of-custody documentation, and prompt submission to the forensic laboratory.

An investigation report states who, what, when, where, why, and how, and lists evidence and witnesses chronologically.

Dactyloscopy: fingerprints are permanent, immutable, and unique; patterns are loops (about 60-65%), whorls (about 30-35%), and arches (about 5%).

Fingerprint identification compares ridge characteristics or minutiae such as bifurcations, ridge endings, and islands; no single universal point count applies in Philippine courts.

Ballistics: class characteristics such as caliber and rifling grooves narrow the source; individual characteristics such as striations identify a specific firearm.

DNA is unique except for identical twins; forensic samples include blood, saliva, hair root, semen, and touch DNA, and require strict chain of custody.

Questioned document examination analyzes handwriting slant, pressure, spacing, and letter forms; ink and paper tests can detect alterations.

Toxicology detects drugs, alcohol, and poisons in body fluids and tissues; serology identifies blood and other biological fluids.

Forensic medicine determines cause and manner of death, time of death, and injury patterns.

Digital forensics preserves devices, uses write-blockers, records hash values, and documents every transfer of electronic evidence.

A security survey identifies vulnerabilities and risks and recommends layered controls: perimeter, access control, CCTV, lighting, and personnel.

Post orders define guard duties, patrol routes, emergency procedures, and reporting requirements at each assigned post.

Guard deployment considers threat level, client requirements, labor law limits, and relief schedules.

Investigation management covers case intake, conflict checks, assignment, supervision, evidence custody, client updates, and closure.

The need-to-know principle limits access to client and case information to persons who require it to perform their duties.

Performance evaluation uses measurable criteria such as attendance, incident response, report quality, and client satisfaction.

Risk management follows identify, assess, control, monitor, and review; insurance and contractual indemnity are common controls.

Licensing compliance requires a valid agency license, individual guard licenses, firearms permits, and updated training records.

Confidentiality prohibits disclosure of client or investigation information without consent or legal compulsion.

Integrity requires accurate reports and evidence; falsification of reports, evidence, or credentials is prohibited.

Impartiality requires investigation without bias based on race, religion, gender, or affiliation.

Use of force is limited to the minimum necessary and lawful defense; excessive force creates criminal and civil liability.

Professional conduct requires obedience to law, respect for human rights, and proper appearance and demeanor.

Bribery and gifts that could influence judgment must be refused and reported to proper authorities.

Continuing education maintains competence and knowledge of legal and procedural updates.

Whistleblowing reports unethical conduct to proper authorities without retaliation.

An incident report contains date, time, location, persons involved, chronological narrative, evidence, witnesses, action taken, and reporting officer.

Reports use factual, objective language; observations are separated from opinions, and conclusions are labeled.

Chronological order, past tense, and active voice are standard in investigative narratives.

Full names, ranks, positions, and contact details are verified and included for all persons mentioned.

Evidence is described by item, location found, chain of custody, and photographs or sketches.

Jargon, slang, and undefined abbreviations are avoided to keep reports understandable in court.

Correct grammar, spelling, and punctuation are required; reports are proofread before signing.

A supplemental report adds new information or corrects errors; a signed original report is never altered.