Guard App4 min readUpdated 2026-07-20

Incident Reporting: Best Practices for Guards

How guards should capture incidents — photos, witness statements, timelines — to ensure control rooms get complete, actionable reports.

Why Quality Incident Reports Matter

An incident report is often the single piece of evidence that determines whether your security firm handled a situation correctly. Incomplete reports create liability gaps. Good reports protect your firm, your guards, and your clients. GuardianHub's incident reporting flow is designed to guide guards through capturing everything that matters — even when they're stressed or under pressure.

The Five Ws: What Every Report Needs

Every incident report must answer: Who was involved (names, descriptions, witness contacts), What happened (chronological, factual — no assumptions), Where exactly (specific location within the site), When (precise timestamps — GuardianHub records these automatically), and Why (contributing factors — slippery floor, broken lock, aggressive behaviour). The form prompts guards for each element so nothing gets missed in the heat of the moment.

  • Who: Involved parties, witnesses, responding officers
  • What: Factual description, chronological order, actions taken
  • Where: Exact location, relevant checkpoint reference
  • When: GuardianHub auto-captures, guard confirms
  • Why: Observed contributing factors, not speculation

Photo and Video Evidence

The incident form supports multiple photo attachments taken directly from the Guard App camera. Guards should photograph: the scene from multiple angles, any damage or injuries, identification documents if relevant, and environmental conditions (lighting, weather, obstructions). The app timestamps and geotags every photo automatically. Photos are stored securely and cannot be deleted or altered — they form part of the tamper-proof evidence chain.

Severity Classification

Guards classify incidents by severity: Minor (no injury, no damage — logged for record), Moderate (minor injury or damage — requires supervisor review), Major (significant injury, damage, or threat — triggers immediate control room alert), and Critical (life-threatening, active threat — triggers SOS protocol). Correct classification ensures the right people are notified at the right speed.

Train guards to default to the higher severity if unsure. It is always better to over-report and downgrade later than to under-report a serious incident.

Was this article helpful?

If you still have questions, our support team is ready to help.

Contact Support