How should you document a security incident after it occurs?

• A. Write a brief note only to the purser
• B. Report only after landing to ground security
• C. Do nothing
• D. Times, passenger identifiers if permissible, actions taken, witnesses, and factual details

Answer: (D)

Documenting a security incident as soon as it occurs is essential because it creates a precise, verifiable record of what happened, who was involved, and how the situation was handled. The best documentation includes exact times of the incident and key events, passenger identifiers if permissible under privacy and policy, a clear description of actions taken by crew and passengers, witnesses, and factual details such as location, equipment involved, any injuries, security responses, decisions made, and the outcome. This objective, factual record supports investigations by airline security and authorities, provides accountability, helps identify trends to improve safety, and stands up in reviews or audits. It’s important to capture information promptly to avoid memory gaps and to follow privacy rules when recording passenger identifiers, using the proper reporting channels and forms required by your airline.