Reviewing a Retail Security Incident Report: A Store Manager's Guide

Read a security incident report while the shift is still fresh enough for people to answer questions. You need to understand what happened, how the guard responded, and whether the store needs to change anything before the next shift.

For a Greater Victoria retailer, that review might involve the store manager, the guard's supervisor, and a shopping centre contact where responsibilities overlap. Agree who receives reports and who can approve changes to coverage. Our retail loss prevention guide covers the wider prevention plan; this guide focuses on assessing the record after an incident.

Establish what the report can tell you

Start with the sequence of events. Look for the time and location of the first observation, the guard's actions, who was notified, and the outcome at the time the report was written. Check whether the times are exact or estimates.

Separate what the guard saw from what another person reported. A staff member's account should be attributed to that person. If the guard arrived after merchandise had gone missing, the report should make that timing clear. Missing stock alone does not establish who took it.

Descriptions should identify relevant actions. Words such as “suspicious” or “aggressive” need the behaviour behind them: what the person did or said, where they were, and how staff responded. Ask for clarification where a label leaves you guessing. Keep unanswered questions visible rather than filling the gaps with assumptions.

Review the response against the agreed duties

Read the report alongside the post orders that applied during that shift. Check whether the guard followed the agreed contact and escalation process, supported staff, and kept customers clear of the incident where needed. If the guard left their normal position, establish who covered that area and for how long.

Judge decisions using the circumstances recorded at the time. Recovering merchandise is only one possible outcome. Staff getting support, a confrontation ending without injury, and an urgent concern reaching the right person also belong in the review. Ask the supervisor to explain any departure from the agreed instructions.

If a worker was injured or an incident could have caused serious injury, involve the person responsible for workplace health and safety promptly. A guard's report can support that work. The employer still needs to check the separate investigation and reporting requirements in WorkSafeBC's incident investigation guidance. Do not wait for a routine service review to address an urgent safety concern.

Resolve gaps without rewriting the original account

Send specific questions to the security supervisor. Ask which entrance was involved, when the store contact was reached, or whether an outcome was confirmed. Request a dated clarification so it remains clear what the guard recorded initially and what was established later.

Where camera footage may help, have an authorized person preserve the relevant recording through the store's approved process before it is overwritten. Record the camera and time range, including any known difference between the camera clock and the report. Refer to the stored recording; avoid circulating footage or personal details in a broad email chain. Record only personal information relevant to the incident and use the agreed secure channel for sharing it.

Turn the finding into a specific change

Decide what the evidence supports. A blocked sightline may call for moving a display. A delay in reaching the manager may call for a revised contact procedure. If the guard was dealing with two competing duties, review the assignment and coverage with the provider before the next booking.

Write down who will make the change and when it will be checked. Confirm that affected staff and guards receive revised instructions. Keep the incident open for follow-up if a repair, clarification, or management decision remains outstanding.

Review several reports together before drawing a conclusion about recurring problems. Compare the location, time, staffing, opening hours, and reporting practices. An increase in recorded incidents may reflect more consistent reporting or busier trading; a quiet report does not prove that nothing was missed. Keep confirmed merchandise losses separate from estimates and unresolved inventory discrepancies.

At your next service review, check whether the agreed changes happened and whether the same problem returned. Bring the unresolved reports when discussing retail security coverage, so the conversation starts with the store's actual needs.