Daily activity report template for security guards
A daily activity report template for security guards: header, patrol log, incident log, maintenance notes, and a full sample DAR you can copy.
The Daily Activity Report is the only thing left of your shift once you hand over the keys. Six months later, when a tenant claims nobody patrolled the garage that week, the DAR is the answer or there is no answer.
A usable DAR has seven parts: header, shift-start status, patrol log, incident log, maintenance and safety observations, access control log, and shift-end status. Write entries as they happen, in 24-hour time, with named locations and observed facts instead of conclusions. Never leave a section blank. Write "No incidents to report" instead.
What is a DAR actually for?
Four jobs, and only one of them is the client.
- Evidence. A contemporaneous record written on the shift it describes. Federal Rule of Evidence 803(6) admits business records where the entry was made at or near the time by someone with knowledge and kept as a regular practice. A DAR reconstructed from memory on Friday fails both halves of that.
- Continuity. The next officer inherits your open items. The DAR is where they read them.
- Proof of service. The client is buying rounds they never see. This is the receipt.
- Pattern data. One abandoned cart is litter. The same door found unlocked on eleven Tuesdays is a finding.
What goes in a daily activity report?
1. Header
- Date: full date, not just the day
- Shift: scheduled start and end times
- Officer: full name and badge or ID number
- Post or site: name and street address
- Weather: only where it changes the work, which on an exterior post is most nights
- Relieved: name of the officer you took over from
2. Shift start status
- Time on post and time the handoff finished
- Equipment received and checked: radio, keys counted, vehicle fuel and mileage
- Anything still open from the previous shift
- First round observations
If your handoff is verbal and undocumented, this section is where it goes wrong. A written handoff SOP makes the first three lines of the DAR fill themselves.
3. Patrol log
| Field | Example entry |
|---|---|
| Time | 0230 |
| Patrol type | Interior round, or exterior perimeter |
| Areas covered | Floors 1 to 5, garage levels P1 to P3 |
| Observations | All secure, or the specific finding |
| Checkpoints | 12 of 12 scanned |
That last row is the one clients audit. A scan count only means something if the checkpoints are somewhere a guard has to physically walk to, which is a placement problem before it is a reporting one. See where to put patrol checkpoints and how NFC tags prove the round happened.
4. Incident log
Every incident gets time, location, description, persons involved, action taken, notifications made, outcome, and anything left open for the next shift. Notifications matter more than officers expect. "Supervisor advised 0312, client contact advised 0320" is the line that ends the argument about who knew what.
Anything beyond a minor entry belongs in a full incident report of its own, not compressed into a DAR line. Writing incident reports people actually read covers that format.
5. Maintenance and safety observations
- Burned-out lights, with the exact fixture location
- Leaks, standing water, plumbing
- Damaged property or equipment
- Hazards: wet floors, blocked exits, propped fire doors
- HVAC noise, temperature, alarms
- Lot and walkway conditions, ice, potholes
Log the ticket number you raised, not just the observation. "Reported to maintenance" is unfalsifiable. "Maintenance request 4521" is not.
6. Access control log
- Entry and exit times
- Name and company
- Purpose
- Badge or ID number
- Areas accessed
- Escort provided, and by whom
7. Shift end status
- Final round observations
- Equipment status and what you handed over
- Open items for the incoming officer
- Relieving officer's name
- Time the handoff completed
How should a DAR be written?
Specific, not summarized
Weak: "Checked the building. Everything looked fine."
Better: "0230. Interior round, floors 1 to 5 complete. All office doors secured, no unauthorized persons observed, 12 of 12 checkpoints scanned. Flickering fixture, 3rd floor south corridor, maintenance request 4521."
Observed, not concluded
Weak: "Suspicious-looking man was hanging around the loading dock acting weird."
Better: "White male, approximately 5'10", dark hooded sweatshirt and jeans, at loading dock approximately 15 minutes. Observed looking into parked vehicles and pulling door handles. On my approach, walked away eastbound on Main St."
The second version survives cross-examination. The first one gets your officer asked what "weird" means and what they meant by "suspicious-looking".
24-hour time, every entry
- 0000 is midnight
- 1200 is noon
- 1430 is 2:30 PM
- 2359 is one minute to midnight
Leave out
- Opinions, motives and diagnoses
- Vague quantities: "some", "a few", "around"
- Slang
- Abbreviations your client's attorney will not recognize
- Blank sections. Write "No incidents to report" and sign it.
What does a finished DAR look like?
Daily Activity Report
Date:
Site: Riverside Office Complex, 123 Main Street
Shift: 2200 to 0600, nights
Officer: J. Smith, badge 1247
Weather: Clear, 45F
Relieved: Officer R. Johnson at 2200
2200 On post. Handoff from Officer Johnson. Radio functional, 12 keys on ring, patrol vehicle three-quarter tank. No open incidents. Alarm armed, all zones.
2230 Exterior round complete. All lot lighting functional. 8 vehicles in lot, consistent with cleaning crew. Loading dock secured, all perimeter doors locked.
2315 Interior round, floors 1 to 5. All suites locked. Cleaning crew of 3 working floor 2, IDs verified against the authorized list.
0045 Call from tenant D. Chen, unit 412, noise from unit 414. Responded floor 4, spoke with occupant of 414, volume lowered. No further contact.
0130 Exterior round complete. Shopping cart at dumpster enclosure, moved to maintenance area.
0215 Interior round, floors 1 to 5. Cleaning crew departed 0200 via loading dock, exit verified. All areas secure.
0300 Blue Honda Civic, plate ABC1234, parked in fire lane at main entrance. Plate returns to a building tenant. Warning notice placed, violation photographed.
0345 Exterior and garage round complete, all levels clear. Stairwell A at P2, light fixture out. Maintenance request 4521 submitted.
0430 Interior round complete. All secure.
0515 Final round. Alarm zones 1 to 3 disarmed for morning arrival, per schedule.
0600 Relieved by Officer M. Williams. Briefed on noise complaint (resolved), fire lane violation (documented), stairwell light (ticket 4521). Equipment transferred, 12 keys counted.
Incidents: 1, noise complaint, resolved
Maintenance: 1, stairwell light, ticket 4521
Violations: 1, fire lane, warning issued
Signed: J. Smith, 0610
Notice what is missing. No adjectives, no summary paragraph, no gaps longer than an hour. A reader can reconstruct the whole night from it.
Is a digital DAR better than paper?
Paper works. It just cannot prove when it was written, and that is the whole value of the document.
What the digital version adds
- Server timestamp on every entry, so the record is genuinely contemporaneous
- GPS on the entry, so the round is tied to a place as well as a time
- Photos attached to the line they belong to, not stapled to the back
- A searchable archive, which is how you find the eleven unlocked Tuesdays
- The client sees it at 0605 instead of at the end of the month
What it does not fix
- An officer who batches the whole night at 0550 still writes a worthless report
- Free-text fields still collect "all secure" with no detail
- Dead battery at hour six means no entries at all unless the app queues offline
If you are moving off paper, the sequence matters more than the tool. Getting reports off paper without losing the officers covers the rollout, and turning shift records into client reports covers what the buyer actually wants to see at renewal.
Key Takeaways
- Write entries as they happen. A record assembled at 0550 is not contemporaneous and a court can tell.
- Specific beats complete: time, exact location, what you observed, what you did, who you told.
- Observations, not conclusions. "Pulling door handles" survives cross-examination; "acting suspicious" does not.
- Log ticket numbers and notification times, not "reported to maintenance".
- No blank sections. "No incidents to report", signed, is a finding.
Continue Reading
Security guard shift handoff SOP template
A shift handoff SOP you can lift straight into your binder: the briefing list, joint equipment checks, two signatures, and the paid overlap the FLSA expects.
Security incident report writing that holds up
The structure, detail and tone that make an incident report useful to a client this week and defensible when a lawyer reads it two years later.
Incident response playbook template for guards
An incident response playbook template for security teams: the five-step spine plus ready steps for medical calls, trespass, theft and fire evacuation.