Skip to main content
Image coming soon

The Branch Security Field Supervisor's Incident Command Playbook

$199.00
Adding to cart… The item has been added

A focused course, tailored for you

The Branch Security Field Supervisor's Incident Command Playbook

Run the daylight robbery call, the after-hours alarm sweep, and the Monday loss-prevention review without losing custody of the evidence.

Your 03:14 after-action note is read by Regional Security, Property Operations, the branch manager, the Reg E investigator if the ATM was touched, the workers' comp adjuster if an officer was hurt, and the bank's own loss-prevention scorecard. One paragraph, six readers, zero templates.

$199 one-time
Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Branch security field supervision sits at the join between the bank's regulatory posture and the physical-security operator's standing-post reality. You run the alarm response, the daylight robbery call, the active-aggressor drill, the cash-in-transit window, the courier verification, the after-hours contractor sweep, and the monthly threat-posture review across multiple branches in a metro footprint. The bank books your work as a loss-prevention line item, but the documents you leave behind have to hold up in front of a Reg E examiner, a workers' compensation adjuster, an OSHA general-duty reviewer, a state banking department spot check, and the carrier underwriting the bank's crime and liability cover. Most field supervisors learn this by getting one document wrong, getting a phone call from compliance, and back-filling the format for every incident going forward. The job has no public manual. The bank has internal SOPs but they are written for the standing-post officer, not for the supervisor who has to translate the post into a defensible record. That translation is what this course teaches.

What you walk away with

  • Run an alarm-response post-incident in a format Reg E investigators, workers' comp adjusters, and the bank's loss-prevention team can all use without rework.
  • Defend the chain of custody on physical evidence (cash, paper, camera still, weapon, tampering tool) from the moment of the call to the handover to the responding agency.
  • Brief the standing-post officer in a way that produces incident notes you can sign without rewriting.
  • Walk a Regional Security Director through your monthly threat posture across the branch footprint with one document, not five.
  • Handle the carrier underwriting site visit without the bank's broker calling you to ask what you said and why.

The 12 modules

Module 1. The supervisor's standing post brief that produces signable incident notes
The standing-post officer's incident note is your incident note once you sign it. This module walks the supervisor's pre-shift brief that pins the four things every officer's after-action will be judged on: time stamping, custody language, witness identification, and the exact phrase the officer should not write. Includes the laminated post-brief card officers carry, the photo log template for the standing post, and the radio call-in format that ties the post log to the central monitoring record.
Module 2. The 24-hour incident command timeline that holds up at deposition
Reg E examiners, workers' comp adjusters, and plaintiff attorneys all read incident notes in the same order: who was where, who told whom what, who touched what, who wrote what when. This module teaches the timeline format that satisfies all three readers in one document. Includes the 24-hour incident command worksheet, the timeline diagram template, and the three specific phrasings to avoid because they read as opinion under oath.
Module 3. Chain of custody for branch physical evidence
Cash recovered from a robbery, a tampering tool left at an ATM, a note slid across the counter, a weapon seized from a contractor's bag — each has a different chain-of-custody requirement before the responding agency arrives. This module teaches the one-page custody slip officers can fill out one-handed, the photographic protocol that survives a defence challenge, and the supervisor's sign-off block that completes the handover. Includes the custody slip template and the photo-protocol checklist.
Module 4. Daylight robbery response and the report Reg E will read
Daylight robbery is the incident every supervisor trains for and almost no supervisor writes well. Reg E investigators care about specific elements (teller cage breach, ATM card touched, deposit slip retained, dye pack triggered) that drive their fraud investigation. This module walks the response sequence from radio call to handover, then teaches the report annex that captures the Reg E elements without making the supervisor write a fraud opinion. Includes the response checklist and the Reg E annex template.
Module 5. After-hours alarm response and the false-alarm rebill problem
Every false alarm runs a clock against the bank's monitoring contract and the municipal false-alarm ordinance. This module teaches the after-hours sweep sequence that produces a defensible note even when nothing was wrong, the language that prevents the alarm being recorded as user-caused (which triggers the rebill), and the monthly false-alarm log the property operations team needs for the carrier. Includes the sweep checklist, the cause-coding decision tree, and the false-alarm log template.
Module 6. ATM incident response and Reg E coordination
ATM tampering, skimmer placement, card capture, jackpotting attempts, and post-deposit dispute calls all converge on the supervisor on shift. This module teaches the response sequence that preserves the device, the evidence handling that does not break the bank's chain to the card network, and the Reg E coordination note that goes to the fraud team within the regulatory window. Includes the ATM incident annex and the Reg E coordination memo template.
Module 7. Active-aggressor escalation, the script that keeps the teller out of the decision
When an aggressor escalates, the teller's instinct is to freelance — and the bank's policy is the teller does not freelance. This module teaches the escalation script that puts the supervisor or standing post in control of the verbal sequence, the radio protocol that pulls the second responder without telegraphing, and the post-incident interview format that protects the teller from a coerced statement. Includes the escalation script card, the radio protocol, and the post-incident interview template.
Module 8. Workers' compensation and OSHA general duty for branch security
If an officer cuts a hand on a broken pane, if a slip-and-fall happens during a sweep, if a contractor is injured on a property the bank controls, the documents you leave behind drive the workers' comp claim and the OSHA general-duty review. This module teaches the injury-on-shift incident sequence, the language that protects the carrier's defence, and the OSHA general-duty file that the property operations team needs on hand. Includes the injury-on-shift report template and the OSHA general-duty checklist.
Module 9. Contractor and cash-in-transit verification at the branch level
Cleaners, vault couriers, ATM technicians, IT contractors, and HVAC vendors all pass through the branch under the supervisor's verification. This module teaches the verification sequence that holds the contractor's badge against the branch's authorised-vendor list, the cash-in-transit handover language that satisfies the carrier's bonding requirements, and the after-hours contractor escort log the bank's broker will ask to see. Includes the verification checklist, the cash-in-transit handover template, and the escort log.
Module 10. Monthly loss-prevention scorecard and the Regional Security Director conversation
The Regional Security Director runs the monthly loss-prevention review across a footprint of branches. This module teaches the scorecard format that turns 30 incident notes into a one-page posture, the three numbers the Regional Security Director will lead with, and the narrative that explains a worsening trend without sounding defensive. Includes the scorecard template, the trend-narrative format, and the three-number summary card the supervisor brings to the review.
Module 11. Carrier site visit and the bank's crime and liability cover
Once a year the bank's broker brings the carrier underwriting the crime and liability cover through the branches. The site visit looks at standing-post discipline, evidence handling, alarm response posture, and incident documentation quality. This module teaches the walk-through the supervisor leads, the documents the carrier wants on a clipboard, and the three questions the underwriter will ask. Includes the site-visit playbook and the documents-on-clipboard list.
Module 12. Multi-branch threat posture across a metro footprint
Final module integrates the supervisor's view across the branches in the metro footprint. Teaches the threat-posture map that the Regional Security Director uses to allocate post hours, the cross-branch trend analysis that surfaces a developing pattern (a repeat car in the lot, a recurring suspect description, a tampering signature), and the supervisor's quarterly posture note that goes into the bank's overall security program. Includes the posture map template, the cross-branch trend worksheet, and the quarterly posture note format.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

If the alarm went off at 03:14 and you ran the sweep, modules 1 and 5 give you the after-hours sweep sequence and the false-alarm rebill language.
If a customer disputed a withdrawal and the ATM was the question, modules 3 and 6 give you the chain of custody and the Reg E coordination annex.
If an officer was injured during a shift, module 8 gives you the workers' comp and OSHA documentation that protects the carrier's defence.
If the Regional Security Director's monthly review is on Friday, modules 10 and 12 give you the scorecard, the three-number summary, and the multi-branch posture map.

What you get with this course

  • 12 written course modules in the Art of Service learning environment
  • Downloadable templates for every module (post-brief card, incident timeline, chain-of-custody slip, Reg E annex, sweep checklist, ATM incident annex, escalation script card, injury-on-shift report, contractor verification checklist, monthly scorecard, carrier site-visit playbook, multi-branch posture map)
  • The hand-built implementation playbook for your specific branch mix and metro footprint, delivered alongside course access
  • 30-day refund window if the course does not match the role

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours: account in the Art of Service learning environment is provisioned and the hand-built implementation playbook is delivered alongside it.

Module 1 through 4 (week 1): post brief, incident timeline, chain of custody, daylight robbery report.

Module 5 through 8 (week 2): after-hours alarm, ATM incident, active-aggressor escalation, workers' comp and OSHA.

Module 9 through 12 (week 3): contractor verification, monthly scorecard, carrier site visit, multi-branch posture.

Before and after

Before

Your 03:14 after-action note gets rewritten by Regional Security on Wednesday, the workers' comp adjuster calls Friday to ask what 'secured the area' actually means, and the loss-prevention scorecard arrives Monday with a flag you cannot explain in one paragraph.

After

The 03:14 note holds up on the first read by Regional Security, the carrier, the workers' comp adjuster, and the Reg E investigator. The monthly scorecard reads as posture, not as exception. The Regional Security Director's review takes fifteen minutes and one document.

What happens if you do not address this

The branch security field supervisor role sits between the bank's regulatory posture and the operator's standing-post reality. Every incident note that does not hold up gets rewritten by someone with less context, and the rewrite is the version that goes into the bank's record. Over a quarter of incidents, the rewrite gap is what turns a clean operator into a supervisor the loss-prevention team flags for re-training.

Who it is for

A security field supervisor responsible for multiple retail bank branches in a metro market. Carries the licence and the post orders, runs the standing-post officers, owns the after-action documentation, attends the monthly loss-prevention review, and is the first call when an alarm trips after hours. Usually came up through law enforcement, military, or a national security firm. Comfortable on the radio, less comfortable in the format compliance and underwriting want.

Who this is NOT for. Not for the standing-post officer (the bank's internal SOP covers that role). Not for the corporate security director writing policy (this is the operator's manual, not the policy manual). Not for the loss-prevention analyst reading dashboards (this course is what generates the data the analyst reads).

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Roughly 3 hours of reading per module, plus the time to adapt each template to the specific branch mix and the bank's internal SOP language. A supervisor working three branches in a metro market completes the course in 3 to 4 weeks alongside the standing post schedule.

Why $199 is the right number

Internal bank SOP documents cover the standing-post officer, not the supervisor's documentation translation. ASIS certifications cover the corporate security director's policy view, not the field supervisor's after-action format. Public law enforcement training covers the response, not the bank's Reg E, workers' comp, OSHA, and carrier-underwriting overlay that defines the documents the supervisor leaves behind. This course is the operator's manual for that overlay.

FAQ

Is this a substitute for my state security licence training?
No. State licence training covers legal authority and use of force. This course covers documentation, chain of custody, and the regulatory overlay specific to retail bank branch security.
Does this teach the standing-post officer's role?
No. The standing-post officer's role is covered by the bank's internal SOP. This course is for the supervisor who briefs the standing-post officer and owns the after-action documentation.
Can I use the templates as-is or do they need to be adapted?
Adapted. The templates ship as starting points, and the hand-built implementation playbook adapts them to the specific branch mix, the bank's SOP language, the metro market, and the carrier's documentation requirements.
What if my branch has armed response, not just standing post?
The escalation, response, and chain-of-custody modules cover armed response. The hand-built implementation playbook tunes the language to the bank's armed-response policy.
What does the refund window cover?
If within 30 days the course does not match the role, refund in full. Templates and implementation playbook are not retrievable, but the refund is unconditional.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.