What is the typical sequence for handling a security incident in a building?

• A. Ignore the incident and hope it goes away.
• B. Document incident, preserve evidence, notify authorities as needed, review surveillance logs, and implement corrective actions.
• C. Publicly announce the incident before investigation.
• D. Wait for weeks before taking any action.

Answer: (B)

Effective security incident response follows a clear sequence: document what happened, preserve the evidence, notify authorities as needed, review surveillance logs and data to determine the timeline and scope, and then implement corrective actions to prevent recurrence. Documenting promptly creates an accurate record for investigations, reporting, and insurance. Preserving evidence means minimizing changes to the scene and securing video footage, access logs, alarm data, and any physical traces so nothing is altered before proper handling. Notifying authorities or stakeholders as required ensures legal compliance and access to appropriate support. Reviewing surveillance logs helps confirm what occurred, identify responsible parties, and inform the actions you take. Implementing corrective actions—such as updating procedures, training staff, tightening access controls, and enhancing monitoring—addresses root causes and reduces the chance of a repeat incident.

Choosing to ignore the incident risks safety, legality, and accountability; announcing publicly before investigation can contaminate evidence and cause unnecessary alarm; waiting weeks to act delays protection and recovery.