One of the most important responsibilities of a professional security officer is understanding and following the communication protocols established by the security company, the client, and the specific contract. Security operations rarely function independently — they run inside a larger structure of supervisors, property management, employees, emergency personnel, and sometimes government agencies. Your effectiveness is measured not only by what you observe, but by whether you communicate the right information to the right person at the right time.
What "Pursuant to Contract" Means
Every post operates under a written contract between the security company and the client. That contract — and the post orders derived from it — defines exactly who you must contact, in what order, and within what timeframe for every category of incident. "Pursuant to contract" means in accordance with what the contract requires. Not what you think is best. Not what your friend at another site does. What this contract says. Deviating from contract protocol — even with good intentions — can void the client agreement, expose the company to liability, and end a career.
Where the Protocols Live — and Which Wins
Contact protocols are typically found in three documents, and you must know all three: the Post Orders (the site-specific operations manual), the Client Service Agreement (the master contract and its escalation matrix), and the company-wide Standard Operating Procedures (SOP). When two documents disagree, follow this order of authority.
The Escalation Tiers — Who to Contact & When
Most client contracts use a five-tier escalation structure. Always confirm it against your active post order, but memorize the framework.
Tier 1
911 — Emergency Services
Any threat to life, active fire, active violence, serious medical emergency, or felony in progress. Always called first when life safety is at risk.
Tier 2
Site Supervisor / Account Manager
Notification of any active incident, request for backup, or on-site decisions exceeding your authority. Called immediately after 911 if applicable.
Tier 3
Dispatch / Operations Center
The communication hub — routine check-ins, status updates, cross-site coordination, and after-hours escalation when a supervisor is unavailable.
Tier 4
Client Point of Contact
Incidents affecting the client's property, employees, customers, or operations — per the contract notification matrix. Often only after a supervisor is informed.
Minor events that do not require live notification but must be recorded in the DAR or incident report and reviewed by a supervisor in the normal course.
The Internal Contacts
Within your own company, three roles carry your traffic. Field supervisors are operational resources — not just disciplinary figures — who provide guidance, oversight, and decision support when guidance is needed, a serious incident develops, equipment fails, or you are simply uncertain about procedure. Dispatch or operations centers are the communication hub, coordinating officers, supervisors, patrol units, and client representatives. Account managers oversee the client relationship and become involved in major incidents — generally you do not bypass your supervisor to reach them unless directed.
On the client side, you may need to coordinate with property management or site representatives, Human Resources (for employee misconduct, harassment, or policy violations — where your role is to observe, document, and report facts, never to discipline), and maintenance and engineering (for broken locks, alarm failures, lighting outages, water leaks, and structural hazards).
"Someone else probably called it in"
At 0247, on patrol of a retail center, you hear glass break and see a man climbing through a broken window into a tenant unit. He hasn't seen you. What you do: call 911 first — a burglary in progress is a felony in progress — then notify dispatch to log the call and send backup. What you do NOT do: engage the suspect, enter the building, or reveal your position. Observe and report from cover until law enforcement arrives. Never assume "someone else probably already called." If the post order requires the notification, you own it.
Confidentiality and When to Escalate
You will be exposed to sensitive information — about employees, visitors, investigations, medical incidents, and security vulnerabilities. Access to information does not authorize discussion of it. Share only on a legitimate, authorized, need-to-know basis, even with coworkers who are not directly involved.
Finally, escalating is never "overreacting." If you are unsure whether an incident meets the reporting threshold, whether law enforcement should be called, whether a client representative must be notified, or whether a policy was violated — notify supervision and seek guidance. Concealing uncertainty to avoid criticism makes incidents worse and increases liability. One rule above all: NEVER speak to the media. The only acceptable response to a reporter is "I am not authorized to comment. Please contact [client] media relations," followed by an immediate notification to your Site Supervisor.