{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/preserve-incident-scene-before-operations-erase-evidence/", "item": { "id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "slug": "preserve-incident-scene-before-operations-erase-evidence", "url": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence.md", "json": "https://update.dsesecurity.com/api/v1/posts/preserve-incident-scene-before-operations-erase-evidence/" }, "title": "Preserve an incident scene before ordinary operations erase the evidence", "summary": "Security personnel should protect life, summon authorities, establish a controlled boundary, prevent avoidable disturbance, identify witnesses, and document their own actions without attempting an untrained crime-scene examination.", "format": { "slug": "playbook", "name": "Playbook" }, "priority": { "slug": "advisory", "name": "Advisory" }, "featured": false, "image": { "theme": "physical-security", "label": "Physical security", "alt": "Integrated video surveillance and controlled entry at a modern commercial facility.", "card_url": "https://update.dsesecurity.com/assets/editorial/physical-security-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/physical-security-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "access-control", "name": "Access Control", "url": "https://update.dsesecurity.com/topic/access-control/" }, { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-08-11T10:24:00+00:00", "modified_at": "2026-08-11T15:18:11+00:00", "reviewed_on": "2026-08-11", "reading_minutes": 3, "word_count": 628, "potentially_affected": "Security officers, reception, facilities, supervisors, incident commanders, access logs, physical barriers, witness separation, found property, damaged doors, assault or theft locations, responder access, cleanup, repair, and return-to-service decisions.", "dse_recommendation": "Define first-arrival priorities and authority, establish inner and outer boundaries, limit and log entry, preserve transient conditions and witnesses, avoid handling items, coordinate urgent safety work, transfer control to law enforcement, and document formal release.", "primary_source": { "name": "U.S. Department of Justice: Crime Scene Investigation—A Guide for Law Enforcement", "url": "https://www.ojp.gov/library/publications/crime-scene-investigation-guide-law-enforcement", "published_on": "2013-09-01", "authority": "www.ojp.gov" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts: initial responders protect life and control the scene

\n

The U.S. Department of Justice’s Crime Scene Investigation: A Guide for Law Enforcement organizes scene work from initial response and prioritization through documentation, processing, completion, and evidence submission. Its initial-response principles put safety first, call for control of people and movement, and emphasize preventing contamination or loss while qualified investigators are summoned.

\n

The guide describes scene boundaries, entry control, documentation of people and actions, witness management, and communication with investigative personnel. It recognizes that urgent medical aid and hazard control can change a scene; those changes should be limited to what is necessary and communicated. Protection of evidence begins before an evidence technician arrives.

\n

The DOJ guide is intended for law enforcement. It does not grant private security personnel search, seizure, detention, evidence-collection, or investigative authority. Applicable law, property rights, employer policy, licensing, collective bargaining, insurer requirements, and law-enforcement direction govern a private organization. Security personnel should remain within training and authority.

\n\n

DSE recommendation: stabilize, protect, record, and transfer

\n

Write a first-arrival procedure for events that may become investigative scenes: assault, burglary, robbery, suspicious death or serious injury, major vandalism, forced door, weapon report, arson indication, or unexplained high-value loss. Give personnel a 24-hour escalation path and criteria for calling emergency services immediately.

\n
    \n
  1. Protect life and identify hazards. Call 911, provide aid within training, and address an active threat, fire, gas, electrical, structural, traffic, or environmental danger. Do not delay lifesaving action to preserve an object. Note what was moved, opened, shut down, cut, or removed and why.
    2. \n
  2. Establish boundaries early. Begin wider than the obvious damage and adjust under authority. Use an inner boundary around the likely scene and an outer boundary for safe coordination, witnesses, media or public separation, and responder staging. Preserve entrance and exit paths for emergency personnel.
    3. \n
  3. Control and log entry. Stop routine cleaning, repairs, deliveries, tours, and management walk-throughs. Record each person entering, time in and out, purpose, and authorizer. Essential fire, medical, utility, or safety work takes priority, but unnecessary observation does not.
    4. \n
  4. Leave items and conditions alone. Do not pick up, unload, wipe, mark, smell, test, reassemble, search, or package an item unless immediate safety or authorized instruction requires it. Protect transient conditions such as weather exposure, footprints, tire marks, doors, lights, odors, temperature, or running equipment without contaminating them.
    5. \n
  5. Identify people without conducting interrogations. Obtain names, safe contact information, location, and basic immediate observations. Keep witnesses from coordinating accounts when lawful and practical, provide care, and ask them to remain available for police. Record spontaneous statements accurately without leading questions.
    6. \n
  6. Transfer deliberately. Brief the arriving authority on hazards, medical actions, boundaries, entries, changes, witnesses, available access records, and preserved systems. Confirm who controls the scene and who may authorize cleanup, repair, employee reentry, credential changes, or business reopening.
    7. \n
\n

Secure relevant routine records against automatic loss under the approved legal process: access events, alarm logs, guard reports, visitor records, work orders, delivery records, and communications. Do not alter original records, create speculative annotations, or circulate sensitive material. Preserve integrity and document who collected each authorized copy.

\n

Train with tabletop maps and ordinary props, never a surprise realistic crime scene. Test night shift, severe weather, injured persons, a manager demanding entry, essential equipment inside the boundary, and delayed police arrival. After release, photograph authorized conditions, retain the release record, complete repairs, support affected people, and review control failures. Good scene preservation is disciplined restraint: do what safety requires, keep others out, record what changed, and let the lawful investigator direct what comes next.

\n\n

Official references

\n", "content_text": "Source facts: initial responders protect life and control the scene\nThe U.S. Department of Justice’s Crime Scene Investigation: A Guide for Law Enforcement organizes scene work from initial response and prioritization through documentation, processing, completion, and evidence submission. Its initial-response principles put safety first, call for control of people and movement, and emphasize preventing contamination or loss while qualified investigators are summoned.\nThe guide describes scene boundaries, entry control, documentation of people and actions, witness management, and communication with investigative personnel. It recognizes that urgent medical aid and hazard control can change a scene; those changes should be limited to what is necessary and communicated. Protection of evidence begins before an evidence technician arrives.\nThe DOJ guide is intended for law enforcement. It does not grant private security personnel search, seizure, detention, evidence-collection, or investigative authority. Applicable law, property rights, employer policy, licensing, collective bargaining, insurer requirements, and law-enforcement direction govern a private organization. Security personnel should remain within training and authority.\n\nDSE recommendation: stabilize, protect, record, and transfer\nWrite a first-arrival procedure for events that may become investigative scenes: assault, burglary, robbery, suspicious death or serious injury, major vandalism, forced door, weapon report, arson indication, or unexplained high-value loss. Give personnel a 24-hour escalation path and criteria for calling emergency services immediately.\n\nProtect life and identify hazards. Call 911, provide aid within training, and address an active threat, fire, gas, electrical, structural, traffic, or environmental danger. Do not delay lifesaving action to preserve an object. Note what was moved, opened, shut down, cut, or removed and why.\nEstablish boundaries early. Begin wider than the obvious damage and adjust under authority. Use an inner boundary around the likely scene and an outer boundary for safe coordination, witnesses, media or public separation, and responder staging. Preserve entrance and exit paths for emergency personnel.\nControl and log entry. Stop routine cleaning, repairs, deliveries, tours, and management walk-throughs. Record each person entering, time in and out, purpose, and authorizer. Essential fire, medical, utility, or safety work takes priority, but unnecessary observation does not.\nLeave items and conditions alone. Do not pick up, unload, wipe, mark, smell, test, reassemble, search, or package an item unless immediate safety or authorized instruction requires it. Protect transient conditions such as weather exposure, footprints, tire marks, doors, lights, odors, temperature, or running equipment without contaminating them.\nIdentify people without conducting interrogations. Obtain names, safe contact information, location, and basic immediate observations. Keep witnesses from coordinating accounts when lawful and practical, provide care, and ask them to remain available for police. Record spontaneous statements accurately without leading questions.\nTransfer deliberately. Brief the arriving authority on hazards, medical actions, boundaries, entries, changes, witnesses, available access records, and preserved systems. Confirm who controls the scene and who may authorize cleanup, repair, employee reentry, credential changes, or business reopening.\n\nSecure relevant routine records against automatic loss under the approved legal process: access events, alarm logs, guard reports, visitor records, work orders, delivery records, and communications. Do not alter original records, create speculative annotations, or circulate sensitive material. Preserve integrity and document who collected each authorized copy.\nTrain with tabletop maps and ordinary props, never a surprise realistic crime scene. Test night shift, severe weather, injured persons, a manager demanding entry, essential equipment inside the boundary, and delayed police arrival. After release, photograph authorized conditions, retain the release record, complete repairs, support affected people, and review control failures. Good scene preservation is disciplined restraint: do what safety requires, keep others out, record what changed, and let the lawful investigator direct what comes next.\n\nOfficial references\n\nU.S. Department of Justice, Office of Justice Programs, Crime Scene Investigation: A Guide for Law Enforcement, September 2013.\nNational Institute of Justice, Crime Scene Investigation: A Guide for Law Enforcement, original technical working group guide.", "content_markdown": "## Source facts: initial responders protect life and control the scene\n\nThe U.S. Department of Justice’s [Crime Scene Investigation: A Guide for Law Enforcement](https://www.ojp.gov/library/publications/crime-scene-investigation-guide-law-enforcement) organizes scene work from initial response and prioritization through documentation, processing, completion, and evidence submission. Its initial-response principles put safety first, call for control of people and movement, and emphasize preventing contamination or loss while qualified investigators are summoned.\n\nThe guide describes scene boundaries, entry control, documentation of people and actions, witness management, and communication with investigative personnel. It recognizes that urgent medical aid and hazard control can change a scene; those changes should be limited to what is necessary and communicated. Protection of evidence begins before an evidence technician arrives.\n\nThe DOJ guide is intended for law enforcement. It does not grant private security personnel search, seizure, detention, evidence-collection, or investigative authority. Applicable law, property rights, employer policy, licensing, collective bargaining, insurer requirements, and law-enforcement direction govern a private organization. Security personnel should remain within training and authority.\n\n## DSE recommendation: stabilize, protect, record, and transfer\n\nWrite a first-arrival procedure for events that may become investigative scenes: assault, burglary, robbery, suspicious death or serious injury, major vandalism, forced door, weapon report, arson indication, or unexplained high-value loss. Give personnel a 24-hour escalation path and criteria for calling emergency services immediately.\n\n- Protect life and identify hazards. Call 911, provide aid within training, and address an active threat, fire, gas, electrical, structural, traffic, or environmental danger. Do not delay lifesaving action to preserve an object. Note what was moved, opened, shut down, cut, or removed and why.\n\n- Establish boundaries early. Begin wider than the obvious damage and adjust under authority. Use an inner boundary around the likely scene and an outer boundary for safe coordination, witnesses, media or public separation, and responder staging. Preserve entrance and exit paths for emergency personnel.\n\n- Control and log entry. Stop routine cleaning, repairs, deliveries, tours, and management walk-throughs. Record each person entering, time in and out, purpose, and authorizer. Essential fire, medical, utility, or safety work takes priority, but unnecessary observation does not.\n\n- Leave items and conditions alone. Do not pick up, unload, wipe, mark, smell, test, reassemble, search, or package an item unless immediate safety or authorized instruction requires it. Protect transient conditions such as weather exposure, footprints, tire marks, doors, lights, odors, temperature, or running equipment without contaminating them.\n\n- Identify people without conducting interrogations. Obtain names, safe contact information, location, and basic immediate observations. Keep witnesses from coordinating accounts when lawful and practical, provide care, and ask them to remain available for police. Record spontaneous statements accurately without leading questions.\n\n- Transfer deliberately. Brief the arriving authority on hazards, medical actions, boundaries, entries, changes, witnesses, available access records, and preserved systems. Confirm who controls the scene and who may authorize cleanup, repair, employee reentry, credential changes, or business reopening.\n\nSecure relevant routine records against automatic loss under the approved legal process: access events, alarm logs, guard reports, visitor records, work orders, delivery records, and communications. Do not alter original records, create speculative annotations, or circulate sensitive material. Preserve integrity and document who collected each authorized copy.\n\nTrain with tabletop maps and ordinary props, never a surprise realistic crime scene. Test night shift, severe weather, injured persons, a manager demanding entry, essential equipment inside the boundary, and delayed police arrival. After release, photograph authorized conditions, retain the release record, complete repairs, support affected people, and review control failures. Good scene preservation is disciplined restraint: do what safety requires, keep others out, record what changed, and let the lawful investigator direct what comes next.\n\n## Official references\n\n- U.S. Department of Justice, Office of Justice Programs, [Crime Scene Investigation: A Guide for Law Enforcement](https://www.ojp.gov/library/publications/crime-scene-investigation-guide-law-enforcement), September 2013.\n\n- National Institute of Justice, [Crime Scene Investigation: A Guide for Law Enforcement](https://www.ojp.gov/pdffiles1/nij/178280.pdf), original technical working group guide." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "url": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-08-11" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Preserve an incident scene before ordinary operations erase the evidence", "item": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/#article", "identifier": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "url": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/", "headline": "Preserve an incident scene before ordinary operations erase the evidence", "description": "Security personnel should protect life, summon authorities, establish a controlled boundary, prevent avoidable disturbance, identify witnesses, and…", "abstract": "Security personnel should protect life, summon authorities, establish a controlled boundary, prevent avoidable disturbance, identify witnesses, and document their own actions without attempting an untrained crime-scene examination.", "articleBody": "Source facts: initial responders protect life and control the scene\nThe U.S. Department of Justice’s Crime Scene Investigation: A Guide for Law Enforcement organizes scene work from initial response and prioritization through documentation, processing, completion, and evidence submission. Its initial-response principles put safety first, call for control of people and movement, and emphasize preventing contamination or loss while qualified investigators are summoned.\nThe guide describes scene boundaries, entry control, documentation of people and actions, witness management, and communication with investigative personnel. It recognizes that urgent medical aid and hazard control can change a scene; those changes should be limited to what is necessary and communicated. Protection of evidence begins before an evidence technician arrives.\nThe DOJ guide is intended for law enforcement. It does not grant private security personnel search, seizure, detention, evidence-collection, or investigative authority. Applicable law, property rights, employer policy, licensing, collective bargaining, insurer requirements, and law-enforcement direction govern a private organization. Security personnel should remain within training and authority.\n\nDSE recommendation: stabilize, protect, record, and transfer\nWrite a first-arrival procedure for events that may become investigative scenes: assault, burglary, robbery, suspicious death or serious injury, major vandalism, forced door, weapon report, arson indication, or unexplained high-value loss. Give personnel a 24-hour escalation path and criteria for calling emergency services immediately.\n\nProtect life and identify hazards. Call 911, provide aid within training, and address an active threat, fire, gas, electrical, structural, traffic, or environmental danger. Do not delay lifesaving action to preserve an object. Note what was moved, opened, shut down, cut, or removed and why.\nEstablish boundaries early. Begin wider than the obvious damage and adjust under authority. Use an inner boundary around the likely scene and an outer boundary for safe coordination, witnesses, media or public separation, and responder staging. Preserve entrance and exit paths for emergency personnel.\nControl and log entry. Stop routine cleaning, repairs, deliveries, tours, and management walk-throughs. Record each person entering, time in and out, purpose, and authorizer. Essential fire, medical, utility, or safety work takes priority, but unnecessary observation does not.\nLeave items and conditions alone. Do not pick up, unload, wipe, mark, smell, test, reassemble, search, or package an item unless immediate safety or authorized instruction requires it. Protect transient conditions such as weather exposure, footprints, tire marks, doors, lights, odors, temperature, or running equipment without contaminating them.\nIdentify people without conducting interrogations. Obtain names, safe contact information, location, and basic immediate observations. Keep witnesses from coordinating accounts when lawful and practical, provide care, and ask them to remain available for police. Record spontaneous statements accurately without leading questions.\nTransfer deliberately. Brief the arriving authority on hazards, medical actions, boundaries, entries, changes, witnesses, available access records, and preserved systems. Confirm who controls the scene and who may authorize cleanup, repair, employee reentry, credential changes, or business reopening.\n\nSecure relevant routine records against automatic loss under the approved legal process: access events, alarm logs, guard reports, visitor records, work orders, delivery records, and communications. Do not alter original records, create speculative annotations, or circulate sensitive material. Preserve integrity and document who collected each authorized copy.\nTrain with tabletop maps and ordinary props, never a surprise realistic crime scene. Test night shift, severe weather, injured persons, a manager demanding entry, essential equipment inside the boundary, and delayed police arrival. After release, photograph authorized conditions, retain the release record, complete repairs, support affected people, and review control failures. Good scene preservation is disciplined restraint: do what safety requires, keep others out, record what changed, and let the lawful investigator direct what comes next.\n\nOfficial references\n\nU.S. Department of Justice, Office of Justice Programs, Crime Scene Investigation: A Guide for Law Enforcement, September 2013.\nNational Institute of Justice, Crime Scene Investigation: A Guide for Law Enforcement, original technical working group guide.", "datePublished": "2026-08-11T10:24:00+00:00", "dateModified": "2026-08-11T15:18:11+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/preserve-incident-scene-before-operations-erase-evidence/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Preserve an incident scene before ordinary operations erase the evidence" }, "articleSection": [ "Access Control", "Business Continuity" ], "keywords": [ "Access Control", "Business Continuity", "Playbook", "Advisory priority" ], "genre": "Playbook", "about": [ { "@type": "Thing", "name": "Access Control", "url": "https://update.dsesecurity.com/topic/access-control/" }, { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" } ], "wordCount": 628, "timeRequired": "PT3M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "U.S. Department of Justice: Crime Scene Investigation—A Guide for Law Enforcement", "url": "https://www.ojp.gov/library/publications/crime-scene-investigation-guide-law-enforcement", "datePublished": "2013-09-01" } } ] } }