What action should a security guard take when witnessing suspicious behavior?

Outline (skeleton)

• Hook: In Ontario, a security guard’s job blends vigilance with smart judgment.

• Core question recap: What action should you take when you notice suspicious behavior? The right move is to document and report to your supervisor.

• Why the other options fall short: Confrontation can spark a confrontation; waiting for a crime to occur misses prevention; calling police without a plan can create gaps.

• The no-risk approach in practice: Step-by-step for documentation, then escalation to a supervisor.

• What to record: time, place, behavior, descriptions, witness notes, camera or radio logs.

• How to report: What to include, how to pass it along, and how supervisors use it.

• When to call police: Conditions under which immediate police contact is appropriate.

• Tools and routines in Ontario security work: incident forms, radios, CCTV evidence, and supervisor protocols.

• Tangent on training and culture: PSISA basics, de-escalation, and staying calm.

• Common pitfalls and tips to stay sharp.

• Quick, practical checklist.

• Closing thought: Small steps protect people and property—and keep you on solid ground.

Article: The right move when you spot something off

Let’s set the scene. You’re stationed at a doorway, patrol car park, or a busy mall corridor in Ontario. The day-to-day rhythm is familiar: shoppers, staff, a few late arrivals, and the occasional person who seems out of place. Then you notice suspicious behavior—something that doesn’t quite fit, a moment that doesn’t feel right. The instinct to protect people and property is there, but what’s the best way to respond? Here’s the thing: document what you see and report it to your supervisor. That approach keeps you safe, protects others, and follows the rules that govern our field.

First, let’s talk about why not the other options. Ignoring it until something criminal happens? That’s a path to missed clues and bigger risks. Directly confronting someone in a non-criminal moment can escalate tension and put you or bystanders in danger. Waiting for a crime to occur effectively gives the situation a window to bloom. And calling the police without a plan—well, that can lead to a response that isn’t matched to the on-site reality. The goal is to preserve safety through a calm, structured process, not to improvise in the moment.

In Ontario, security work is built on clear procedures. The Private Security and Investigative Services Act (PSISA) and related regulations emphasize careful observation, proper reporting, and escalation through the chain of command. Guards are trained to be observant, not to be vigilantes. The right response when you witness something suspicious is to create a record and involve the people who can decide the next move.

How to document like a pro

Documentation is more than a notebook jotting; it’s a precise, helpful record. Here’s a practical way to handle it:

• Start with objective details. Note the exact location and time. For instance: “14:32, Entrance A, security desk area.”

• Describe the behavior, not just the person. What did you observe? Did someone linger near restricted doors? Did they try to obscure their actions or leave suspicious items unattended?

• Describe appearances carefully but respectfully. Height, clothing, distinctive accessories, vehicle details—without speculation about motives.

• Record the sequence. Write a brief timeline: what you saw, when you first noticed it, any changes, and when it stopped or continued.

• Include environmental context. Was it crowded? Was lighting dim? Were cameras in view? Did you hear unusual noises?

• Note witnesses and corroborating details. If a coworker observed the same behavior, jot that down with times.

• Capture evidence logs. If CCTV or body-worn cameras captured footage, make a note of the relevant segments and any access you had to them (within your organization’s policy).

The aim is to create a neutral, precise account. Think of it like a weather report: facts, not feelings, and a clear chain of events you can trace.

Escalation: handing the baton to the supervisor

Once you’ve captured a solid record, the next step is to pass it up the chain. The supervisor is trained to interpret the data, weigh risk, and decide whether to involve other resources. Here’s a smooth way to do it:

• Notify promptly. Don’t wait hours to report. Share your documented notes with your supervisor as soon as you can.

• Present the essentials first. Start with what you observed (time, place, behavior) and any immediate concerns.

• Provide context. If there are ongoing incidents in the area or similar reports, mention those connections.

• Share supporting materials. If there are camera links, log numbers, or radio transcripts, attach or reference them as per your site protocol.

• Outline the proposed next steps. Your supervisor might want you to monitor from a safe distance, relocate staff, or contact law enforcement if a threshold is met.

• Document the report itself. Most sites have incident-report forms or digital systems. Fill them out completely, then save a copy for yourself and the supervisor.

This process helps prevent miscommunications and ensures a coordinated response. It also creates a clear trail that can be invaluable if the situation escalates or if subsequent investigations occur.

When does police involvement become the right move?

Police should be contacted when there’s a clear crime in progress, imminent danger, or a threat that requires law enforcement to intervene. In many situations, your supervisor will determine whether to call police based on the facts you’ve documented and the assessed risk. If you’re ever unsure, err on the side of notifying your supervisor, and let them guide the decision about police contact. It’s not about being indecisive; it’s about following a responsible chain of command and keeping people safe.

Tools of the trade—the practical side

Out in the field, you’ll lean on several reliable tools and channels to execute this plan smoothly:

• Incident report forms or digital security management systems. These keep your notes organized and accessible.

• Radios and hands-free communication. A quick, clear report to your supervisor is much easier when you’re hands-free and in contact.

• CCTV and camera logs. If you have access, reference the relevant footage and preserve it according to policy.

• Body cameras (where used). If your agency uses them, note when they started and whether footage is available for review.

• Written checklists or standard operating procedures. A quick reference to ensure you don’t miss a step can be a real time-saver.

The Ontario context matters here. Guards are expected to understand how to use these tools compliantly, respect privacy considerations, and report incidents accurately, all while staying within the bounds of regulation and site policy.

A quick tangent on training and mindset

Security work isn’t just about clocking a schedule. It’s about training your observation skills and staying calm when tension rises. In Ontario, reputable programs cover de-escalation techniques, safe positioning, and the importance of not taking unnecessary risks. The goal is to reduce harm and maintain a safe environment. A calm, methodical approach often prevents situations from spiraling. Let me ask you this: when you feel pressure during a tense moment, what helps you stay grounded—breathing, a quick mental checklist, or a practiced phrase to calm others? The answer matters because small habits make big differences in real scenarios.

Common missteps to avoid—and how to fix them

• Rushing to judgment. Suspicious behavior isn’t proof of wrongdoing. Stick to observable facts in your report.

• Sharing unverified conclusions aloud. Comments about motives or intent should be avoided in the moment; those judgments belong in the written record and to your supervisor.

• Delaying the report. Procrastination creates gaps in information. A timely, thorough report helps everyone make informed decisions.

• Overreliance on one channel. Don’t rely solely on your memory; back it up with written notes and, if policy allows, camera or radio logs.

• Skipping de-escalation steps. If a confrontation is avoided and risk is minimized, everyone wins. Use de-escalation language and maintain safe distances.

A practical checklist you can keep in your pocket

• Observe and note: time, location, behavior, physical descriptions.

• Document objectively: stick to facts; avoid speculation.

• Collect evidence: references to cameras, logs, or witnesses.

• Communicate: report to your supervisor with a concise brief.

• Decide the next step with your supervisor: monitor, inform others, or contact police if needed.

• Record the outcome: what happened after the report was filed.

Because the moment you act, you’re not just protecting property—you’re safeguarding people’s sense of security. That’s a real job worth doing well.

A few closing reflections

Security work sits at a crossroads between vigilance and responsibility. The right action when you witness suspicious behavior—documenting it and reporting to a supervisor—reflects a mature, safety-first mindset. It’s not about being passive; it’s about choosing a path that minimizes risk and maximizes clarity. And that choice, repeated across shifts and sites, helps build a safer environment for everyone.

If you’re curious about the practical side, you’ll notice that many Ontario sites lean on familiar tools: easy-to-fill incident forms, clear radio protocols, and a culture that values timely escalation. This isn’t just paperwork; it’s a living record that guides decisions, supports law enforcement when needed, and keeps your team’s actions aligned with legal and organizational expectations.

So, the next time you spot something that feels off, you won’t have to hesitate. You’ll document what you see, capture the important details, and pass the information to your supervisor. It’s a sturdy, responsible approach that fits the job, fits the law, and, most importantly, fits the people you’re protecting.

If you’re looking for a place to grow in this field, consider how your local training programs frame incident reporting, de-escalation, and the balance between observation and action. The more you internalize those steps, the more naturally they’ll come when the moment arrives. And when the moment comes, your calm, precise response will matter more than you can imagine.