Aggressive Behaviour
Management — Read · Redirect · Restrain Lawfully

Every hostile encounter follows a predictable arc. Before a subject swings a fist or forces a physical intervention, they pass through two earlier stages that a trained officer can read and interrupt. The escalation continuum — anxiety, defensiveness, physical aggression — provides the conceptual spine of this course and determines every response option available to you under Canadian law. Mastering the continuum means you will never be surprised by a transition you should have seen coming.

The escalation continuum is not a rigid script — it is an assessment framework. Real subjects move through it at different speeds: some linger at anxiety for twenty minutes before de-escalating; others transition from anxiety to physical aggression in under ten seconds. The officer's job is to track the subject's current stage in real time and match the response level precisely, never exceeding it and never falling short of it. Both over-response and under-response create legal and safety problems.

Stage 1 — Anxiety: The Entry Point

Anxiety is the first and most recoverable stage. The subject feels threatened, embarrassed, overwhelmed, or cornered. Physiological signs are subtle: slightly elevated voice pitch, frequent position shifts, avoiding or breaking eye contact while scanning the space, and reduced personal space relative to bystanders. Body language is restless — pacing, fidgeting, compressing the lips, clenching and releasing the hands. The subject may be making demands or expressing grievances loudly, but the content of what they say is less important than the physiological state they are in.

At Stage 1, no offence has occurred and no right of physical intervention has arisen. Your legal authority to intervene physically is minimal; your authority to communicate is unlimited. Every verbal tool covered in Lesson 3 is designed specifically for the anxiety stage. An officer who intervenes effectively here — creating a felt sense of safety, de-escalating arousal, and addressing the underlying trigger — prevents the subject from ever reaching physical aggression. The Ontario Use of Force Model explicitly positions officer presence and verbal communication as the first two response levels, and the law expects officers to attempt them sincerely before any force consideration arises.

Under the Ontario Use of Force Model, officer presence itself is a response level. How you carry yourself — your pace, your posture, your proximity, your facial expression — communicates either threat or calm to the subject's nervous system. An officer who approaches quickly, stands face-to-face, crosses their arms, and speaks in a clipped authoritative tone is using their presence as an escalation tool. An officer who approaches slowly, stands at 45°, keeps hands visible, and speaks calmly is using presence as a de-escalation tool. The same physical presence can escalate or de-escalate depending on how it is deployed.

Stage 2 — Defensiveness: The Point of Decision

Defensiveness signals that the subject has begun to feel cornered and is preparing for fight or flight. Voice volume rises, the torso turns to present a bladed profile, and verbal statements shift from expressing grievance to issuing demands or threats. Mild physical resistance — shrugging off a hand, stepping aggressively toward you, positioning the body for a strike — may appear. You now have a narrowing window in which continued verbal intervention can still work, but you must simultaneously begin assessing whether physical proximity is wise. Contact and Cover positioning becomes relevant at Stage 2 even before physical contact occurs.

At Stage 2, your assessment of pre-attack indicators becomes critical. The five core indicators — target glancing, torso blading, terminal calm, visible carotid pulse, and waistband check — appear most commonly at the transition from Stage 2 to Stage 3. A cluster of three or more within a 10–15 second window is a pre-attack signal that requires immediate tactical repositioning regardless of whether physical aggression has yet been initiated.

From a legal standpoint, defensiveness may satisfy the threshold for a reasonable apprehension of imminent threat under Section 34 of the Criminal Code if a specific verbal or physical threat accompanies it — but proportionality still demands a verbal response first unless that response would create unreasonable risk. A subject who is merely loud and posturing has not yet committed an offence that would authorise physical restraint under Section 25 alone. The officer who reaches for restraint at Stage 2 without exhausting verbal options faces a heavy burden of justification in post-incident review.

Stage 3 — Physical Aggression: The Lawful Force Window

Physical aggression means the subject has initiated or is in the act of initiating physical contact — a strike, a grab, a charge, a headbutt. This is the stage where Section 25 authority (protection of persons under lawful authority), Section 27 (prevention of an offence), and Section 34 (defence of person) converge to permit proportionate physical intervention. The critical phrase is proportionate: the force used must be reasonable in relation to the threat presented, judged against the objective bystander standard — what would a reasonable person with the same training and information have done in the same circumstances?

Even at Stage 3, proportionality is not static. If a subject who has struck you falls to the ground and stops resisting, you are immediately back in a de-escalation situation. Continuing force after compliance is over-response, assessed against the same objective bystander standard. The Ontario Use of Force Model is a loop that operates in both directions: up through the stages during escalation and back down during de-escalation. An officer who freezes at a high response level after the subject has moved to a lower stage is failing the same standard as one who under-responds during escalation.

Cooper's Color Codes Applied to the Continuum

Cooper's Color Codes — White (unaware), Yellow (relaxed alert), Orange (specific threat identified), Red (fight) — map directly onto the escalation stages and provide a complementary framework for officer alertness management. A trained security officer should operate at Yellow by default throughout their shift: alert, scanning, and aware of their environment without fixating on any specific threat. When Stage 1 anxiety indicators appear in a subject, the officer should move to Orange: a specific potential threat has been identified and a pre-planned response is being prepared. By the time a subject reaches Stage 3, the officer should be in Red — with a response plan already selected and ready to execute.

The importance of the Orange stage cannot be overstated. At Cooper's Orange — corresponding roughly to a heart rate of 115–145 bpm — an officer can still execute complex decisions including verbal commands, repositioning, and calling for Cover. Above 145 bpm (Red), fine motor control begins to degrade and the brain is restricted to gross motor responses. Pre-attack indicator recognition is the tool that allows officers to plan their response while still in Orange, before the heart rate spike of Red eliminates fine motor options.

The Ontario Use of Force Model — Seven Response Levels

The Ontario Use of Force Model (OUFM) is the framework mandated by the Ministry of the Solicitor General that structures every response option available to a licensed security officer. It operates across seven levels — officer presence, verbal communication, empty-hand soft techniques, hard empty-hand techniques, intermediate weapons, and lethal force — with the subject's behaviour on one side and the officer's response level on the other. The OUFM is not a checklist: it is a dynamic decision model that recognises the officer and subject are in a constantly changing interaction. The model also places risk assessment and tactical considerations outside the response levels — these are constant factors that run in parallel to the response decision at every moment of the encounter.

The most critical teaching of the OUFM for ABM purposes is the proportionality principle: at every stage of the encounter, the response selected must be the lowest level capable of achieving a legitimate objective — compliance, prevention of harm, or lawful removal — without exceeding it. "Capable of achieving" is assessed against the reasonable officer standard: a reviewing authority will ask whether a reasonable officer with the same training could have achieved the objective at a lower response level. When the answer is yes, the higher response level was disproportionate. When the answer is no — when the lower level was genuinely inadequate — the higher level is justified.

Environmental Factors That Accelerate Escalation

Not all subjects move through the escalation continuum at the same speed. Environmental factors can dramatically compress the timeline from anxiety to physical aggression — sometimes to under 30 seconds. Officers must assess these factors on arrival and adjust their response speed accordingly. The key accelerating factors are: alcohol or drug intoxication, which impairs the subject's cognitive processing and reduces the effectiveness of verbal de-escalation; crowd presence, which creates social performance pressure that makes a subject less willing to back down without losing face; perceived injustice, where the subject believes (correctly or not) that they have been treated unfairly and is using aggression to reassert equity; and mental health crisis, where the subject may be responding to internal stimuli that are not visible to the officer and may not respond to logic-based de-escalation at all.

Awareness of these accelerating factors does not change the response sequence — verbal de-escalation must still be attempted first — but it changes the speed at which the officer prepares the next response level. An intoxicated subject at Stage 1 should be assessed as a potential Stage 2 within seconds rather than minutes. A subject with a visible mental health crisis should trigger simultaneous LEAPS application and a Cover call before any apparent indicators of Stage 2 appear. These assessments are legal as well as tactical: the objective bystander standard includes reasonable consideration of the observable factors that influenced the officer's threat assessment.

The Cost of Misidentifying the Stage

The practical consequence of misidentifying an escalation stage runs in both directions. Over-identification — treating a Stage 1 subject as Stage 2 or 3 — results in physical intervention that is legally disproportionate. The most common over-identification error in Ontario security incidents is treating loud verbal expression as a physical threat: a subject shouting is at Stage 1 unless the content of the speech is a specific threat directed at an identified person and accompanied by physical movement toward them. Volume alone does not change the stage. An officer who applies a physical hold to a subject who is shouting but has not threatened or struck anyone faces an assault allegation, not a justified use of force.

Under-identification — treating a Stage 2 or 3 subject as Stage 1 — results in under-response that exposes both the officer and third parties to physical harm. The most common under-identification error is interpreting terminal calm as de-escalation: when an agitated subject suddenly goes quiet and still, inexperienced officers often believe verbal engagement has succeeded and reduce their readiness. As taught in Lesson 2, terminal calm is typically a pre-attack indicator — the subject has made the decision to act and is focusing energy into the strike rather than verbal expression. Reducing readiness at terminal calm is one of the most dangerous misreadings in security work.

The Professional Standard — What "Reasonable" Means

The word "reasonable" appears in every statutory authority for security officer force — Section 25, 27, and 34 of the Criminal Code all invoke it. In the security context, "reasonable" is assessed against the standard of a similarly-trained officer in the same circumstances. This is not the average member of the public's standard, which would be lower; and it is not the perfect officer standard, which would be impossibly high. It is the standard of a competent, trained professional who has completed this training, knows the escalation continuum, can read pre-attack indicators, applies LEAPS, and understands the statutory framework. That standard is what this course builds toward — and it is the standard against which your conduct in any incident will be measured.

The practical implication is that completing this training and then failing to apply it in a use-of-force situation is worse, legally, than never having received the training at all. Courts and regulatory panels have held that a trained officer who ignores their training is not protected by the "reasonable officer" standard — because a reasonable officer with this training would have applied it. Competence in escalation continuum assessment is both a professional skill and a legal shield.

Post-Incident Application — Articulating the Continuum in Your Report

One of the most valuable skills this lesson develops is the ability to articulate your stage assessment in writing, after the incident, in a way that a reviewing authority can independently evaluate. The format is: name the stage, identify the specific indicators that placed the subject in that stage, name the response option you selected from the Ontario Use of Force Model, and explain why you selected that option rather than a higher or lower one. This four-part structure is the minimum necessary to establish that your assessment was systematic and your response was proportionate.

Example: "At approximately 21:32, the subject displayed Stage 1 (Anxiety) indicators: he was pacing in a 3-metre radius, speaking at elevated volume without directing specific verbal threats at any person, and scanning the environment without fixating on any individual target. I applied the first response level of the Ontario Use of Force Model — officer presence — by positioning myself in the subject's line of sight at 2 metres, maintaining a neutral facial expression and visible relaxed hands, and allowing the subject to observe my attention for 30 seconds before initiating verbal contact." This sentence tells the reviewer exactly what stage was assessed, what indicators supported that assessment, and what response was selected with an explanation grounded in the OUFM framework.

Contrast this with a report that says: "The subject was agitated so I approached him." The reviewing authority receives no information about the stage assessment, no observable indicators, no response-level selection rationale, and no reference to the OUFM. It is not that the officer's actions were necessarily wrong — it is that the report provides no basis for confirming they were right. A report with this level of detail will always be flagged for follow-up questioning that a well-written report could have avoided entirely.

A subject who intends to strike rarely telegraphs it with a verbal announcement. Instead, the body prepares physiologically for violence, and those physiological preparations are visible if you know what to look for. Pre-attack indicators are involuntary, stress-driven body signals that appear in the seconds before a physical assault begins. Training your eye to cluster-read these indicators — rather than react to any single one — is the difference between anticipating violence and being caught by it.

Pre-attack indicators divide into two categories: physiological responses driven by the sympathetic nervous system that the subject cannot consciously suppress, and behavioural cues that represent the body's instinctive physical preparation for striking. Both categories must be tracked simultaneously. A subject who is trying to appear calm will suppress behavioural cues but cannot suppress physiological ones — which is why the carotid pulse and the skin pallor are particularly reliable indicators when other signals are absent.

Involuntary Physiological Responses

When the sympathetic nervous system activates for a fight response, adrenaline floods the bloodstream within seconds. Blood is shunted away from the skin and extremities toward major muscle groups — causing visible pallor or mottling in lighter-skinned subjects, and flushed skin in others. The carotid pulse becomes visible at the neck, pulsing rapidly even from a metre's distance. The jaw clenches, the lips compress, and breathing becomes rapid and shallow. The pupils dilate, sometimes visibly even in bright light. These are involuntary responses — the subject cannot control them — and they occur regardless of how calm the subject tries to appear verbally.

A subject who is verbally cooperative but showing rapid carotid pulse, pale face, and clenched jaw is physiologically prepared to fight. This disconnect between verbal presentation and physiological state is one of the most dangerous scenarios for an officer: it is the profile of a subject who has made a decision to act and is using cooperation as a tactical delay. Trust the physiological cluster over the verbal presentation — the body cannot lie the way words can.

The Five Core Behavioural Clusters — Tap to Reveal

No single indicator is diagnostic in isolation. A cluster of three or more indicators appearing simultaneously within a 10–15 second window should elevate your assessment to Stage 2 or Stage 3. Flip each card to learn the indicator and its tactical significance.

The Reactionary Gap and Why It Matters

At conversational distance (approximately one metre), a subject can initiate and complete a strike before your nervous system can detect, process, and respond. This is not a training failure — it is the physiological reality of the human reactive cycle. Research from the RCMP and other Canadian law-enforcement training bodies consistently finds that the minimum reactionary gap for a trained officer is 1.5–2 metres. Below that distance, even a trained officer with good situational awareness cannot reliably defend against a committed attack that has already begun.

Pre-attack indicators are the solution to the reactionary gap problem. By detecting the preparation for an attack rather than the attack itself, a skilled officer can identify the threat while still at 1.5–2 metres, maintain that gap during verbal engagement, and have a physical response option pre-selected before the subject closes the distance. A subject who aggressively decreases the reactionary gap — stepping toward the officer despite verbal instructions to remain still — is itself a pre-attack indicator. Treat it as such: step back to restore the gap, note the behaviour, and elevate your assessment.

The Reactionary Cycle — Why You Cannot Out-React a Committed Strike

Human reaction time data from law-enforcement research indicates that the minimum time from stimulus detection to physical response for a trained officer is approximately 250–300 milliseconds (0.25–0.3 seconds). A committed strike from 1.5 metres, swung at an average speed, arrives in approximately 200 milliseconds. This means the reactive cycle — detect, identify, decide, respond — is physically impossible to complete before the strike lands when the officer is within striking distance and the subject has already committed to the attack. This is the neurophysiological basis for the reactionary gap doctrine: it is not that officers lack the skills to react, it is that the human nervous system is physically incapable of reacting in time. The only way to survive the reactionary gap is to act in the preparation phase — by reading pre-attack indicators before the commitment is made.

This reality has significant legal implications. An officer who waits until a fist is in motion before responding is behind the reactionary curve. Courts and regulatory panels in Canada have acknowledged the reactionary gap in multiple decisions — officers are not required to absorb the first blow before defending. Reasonable grounds to apprehend an imminent strike, supported by documented pre-attack indicators, is sufficient legal basis for a defensive response under Section 34 of the Criminal Code. The officer's pre-incident documentation of indicators is what transforms a potentially contested response into a legally defensible one.

Secondary Indicators — Verbal and Paralinguistic Signals

Beyond the five core behavioural clusters, secondary verbal and paralinguistic indicators can contribute to a cluster assessment. These are not independently diagnostic but add weight when combined with the physical indicators. Voice pitch: a sudden drop in pitch, often to a slower, deeper, more deliberate tone, can signal the subject's transition into the focused state that precedes action. Verbal volume decrease: after loud agitated speech, a sudden lowering of volume to near-quiet speech is a potential terminal calm signal in the verbal channel — the same principle applies. Pronoun shift: subjects who transition from "you people" or general complaints to second-person direct address ("you, specifically") are narrowing their threat focus — a behavioural signal worth noting. Question cessation: a subject who has been asking questions and suddenly stops asking suggests they have received the information they needed for their plan and are no longer in an information-gathering mode.

None of these secondary indicators should be weighted equally with the five primary clusters, but they serve as additional data points in a holistic cluster assessment. The principle is that pre-attack assessment is a continuous, multi-channel reading process — not a linear checklist. An officer who is only watching the hands may miss the voice drop that would have completed the cluster. An officer who is too focused on maintaining eye contact may miss the waistband check in the periphery. Distributed attention — scanning all channels while maintaining apparent engagement with one — is a skill that is developed through deliberate practice and scenario training.

Using Distance as a Decision Tool

Distance management is the primary pre-attack mitigation tool. The reactionary gap — the minimum safe distance between officer and subject — is not a fixed number: it varies based on the subject's size, the nature of the potential attack, the environment, and the subject's apparent commitment. Against a large subject with pre-attack indicators at 1 metre, the risk is extreme. Against the same subject at 2.5 metres, the officer has time to prepare and potentially reposition. The general principle is: when indicators appear, increase distance rather than decrease it. Verbal engagement does not require close proximity. Many officers unconsciously step toward a subject as verbal engagement intensifies — this reduces the reactionary gap at precisely the moment it should be maintained or increased. Step back; keep talking.

Environmental geometry also affects the reactionary gap calculation. In a corner, the subject has limited escape options and may be more committed to aggression. In a wide-open space, the subject has more options and may be more amenable to de-escalation. A subject positioned with their back to a wall has removed retreat as an option; their only options are compliance or forward aggression. Officers should always position verbal engagement so the subject has a clear retreat path — the subject's ability to leave without losing face is a de-escalation resource, not a tactical failure.

Documentation of Pre-Attack Indicators — The Legal Standard

When a use-of-force event follows a pre-attack indicator assessment, the report must document the indicators in the same way a physician documents diagnostic criteria: specifically, with observable facts, time-anchored where possible, and distinguished from conclusions. The difference is critical. "I could tell he was about to swing" is a conclusion — a prediction based on an unspecified internal process. "At approximately 21:47, I observed the subject rotate his dominant shoulder rearward, shift weight to his right foot, and look directly at my sternum three times within 15 seconds" is a documented cluster assessment — three specific physical observations at a specific time, which a reviewing authority can evaluate against the known indicators of pre-attack preparation.

The objective bystander standard applied to pre-attack indicator documentation requires that the documented indicators would have led a reasonable similarly-trained officer to the same assessment. This is why the cluster rule matters legally as well as tactically: documenting a single indicator alone would leave the assessment open to challenge. Documenting three simultaneous indicators within a 15-second window from a subject who was already at Stage 2 establishes a cluster that a reasonable officer would have assessed as pre-attack — which grounds the subsequent defensive response in the legal standard required by Section 34.

Multi-Officer Coordination — Reading Indicators as a Team

In a two-officer deployment, the cluster-reading responsibility is shared — but not equally. The Contact officer is engaged in verbal communication and may not have the visual bandwidth to track all five indicators simultaneously. The Cover officer's primary function during verbal engagement is precisely this: comprehensive visual monitoring of the subject's physiology and body language, the approach corridor, and the environment. When the Cover officer observes indicators developing into a cluster, they must communicate this to the Contact officer using a pre-established signal — either a verbal code ("condition upgrade") or a visual hand signal — without the subject understanding the communication.

After an incident in which pre-attack indicators contributed to a response decision, both officers must document their observations independently and compare them in the post-incident briefing. The Cover officer's observation of indicators the Contact officer did not see is a legally relevant fact — it corroborates the cluster assessment and demonstrates that the assessment was systematic rather than reflexive. "Contact officer confirmed: at T-1:30, I observed from the Cover position: (1) subject's right shoulder bladed back; (2) right hand moved to waistband at T-1:28 and again at T-1:22; (3) subject's gaze moved from Contact officer's face to Contact officer's belt three times in 12 seconds." This Cover officer observation corroborates the pre-attack assessment in the incident record with independent verification.

Physical intervention is always a consequence of a verbal failure — either the officer's failure to apply verbal de-escalation effectively, or the subject's refusal to respond to it. This lesson teaches the LEAPS framework — Listen, Empathise, Ask, Paraphrase, Summarise — and the verbal positioning principles that allow a single officer to buy time, reduce arousal, and create the conditions for a peaceful resolution. Non-touch redirection is not a soft option; it is the most powerful tool available for Stage 1 and Stage 2 encounters, and the Ontario Use of Force Model requires that it be attempted before any physical response unless doing so creates unreasonable risk.

De-escalation works because of a neurological principle called co-regulation. The nervous system of a person in high arousal is influenced by the physiological state of the person they are interacting with. A calm officer — lower heart rate, slower breathing, relaxed posture, unhurried voice — creates a physiological pull toward calm in the subject. This is not a metaphor: it is the measurable neurological mechanism behind every successful verbal de-escalation. The inverse is equally true: an anxious, tense, fast-speaking officer activates the subject's threat-detection system and accelerates escalation. You cannot control the subject's physiological state, but you can influence it profoundly by controlling your own.

The LEAPS Framework — Step by Step

LEAPS was developed from crisis negotiation research and has been adopted by mental health first-response teams and de-escalation trainers across Canada. Each step addresses a specific physiological and psychological need of a person in an emotionally escalated state. The framework is sequential — each step prepares the subject for the next. Skipping steps, especially the first two, reduces effectiveness dramatically because a subject who does not feel heard will not engage cognitively with questions or proposed solutions.

Verbal Positioning — The 45° Stance

Verbal de-escalation is not only about words. Where you stand, how you stand, and what your body signals all shape the subject's physiological response before you speak a single word. Standing directly face-to-face with a subject (0°) is the most confrontational officer stance — it activates mirror-neuron-driven dominance responses and places you directly on the attack axis. Standing beside the subject (90°) removes your field of view of the subject's hands and removes your ability to respond to sudden physical action. The 45° position is the standard for verbal engagement: less confrontational than face-to-face, maintains hand visibility, provides lateral movement options in either direction, and keeps you partially offline from the direct attack axis.

Keep your hands visible at chest height or below, palms facing out or neutral. Do not cross your arms — a closed posture mirrors defensiveness and can trigger mirroring aggression in the subject. Do not point with a single finger — it reads as accusatory. Keep your voice at a pace slightly slower than normal and at a pitch slightly lower than the subject. This forces you to breathe more slowly, which reduces your own arousal, and the slower pace activates the parasympathetic system in the listener through co-regulation.

Non-Touch Redirection Techniques

Non-touch redirection uses spatial and verbal positioning to guide a subject's movement or focus without physical contact. The redirectional question frames movement as a request tied to the subject's benefit: "There is a quieter area away from the crowd where we can sort this out without the audience — would you come with me?" This reframes compliance as a choice the subject is making for their own benefit, which is far less threatening than a direct command. The environmental anchor involves moving yourself to a position that naturally draws the subject away from the triggering location — a person who is upset at a front desk often calms when moved to a side office simply because the environmental cue changes.

The role transfer technique is particularly effective when the officer's presence is itself a trigger — for example, when the subject has a prior negative interaction with security. Requesting a supervisor, a colleague, or a person the subject trusts to take over the verbal engagement reduces the adversarial dynamic. Role transfer is not a failure of de-escalation; it is a sophisticated de-escalation tool used by experienced crisis negotiators worldwide.

Mental Health Encounters and Modified LEAPS Application

Standard LEAPS assumes the subject is in a state of elevated emotional distress but is neurologically intact — they can process verbal input, form responses, and engage in the back-and-forth of a communication exchange. When the subject is in a mental health crisis — experiencing psychosis, a severe depressive episode, mania, or dissociative symptoms — the standard LEAPS sequence requires modification. A subject who is responding to internal voices may not process the Listen step as intended because their attention is partially or fully occupied by internal stimuli. A subject in a psychotic episode may not respond to Empathise because they lack the capacity to recognise their own emotional state in that moment.

For mental health encounters, the modified approach is: simplify, slow, and repeat. Use short sentences of five words or fewer. Avoid rhetorical questions. Do not present options or choices — the cognitive load of evaluating alternatives can be overwhelming during a crisis and may increase rather than reduce arousal. Use the subject's first name, repeated gently, to anchor their attention. Announce your own actions before you take them: "I'm going to take one step closer. Is that okay?" This gives the subject's nervous system a moment to prepare for the change, which reduces threat response. Under Section 17 of the Ontario Mental Health Act, R.S.O. 1990, c. M.7, a police officer (not a security officer) may apprehend a person who appears to be suffering from a mental disorder and is a danger to themselves or others — your role is to maintain safety until police arrive, not to perform an MHA assessment.

Communication Errors That Escalate Instead of De-Escalate

Not all verbal communication is de-escalatory. Certain common officer communication patterns reliably increase rather than reduce arousal in agitated subjects. Understanding these patterns allows officers to audit their own communication habits and eliminate the ones that cause harm. The first pattern is ultimatum stacking — issuing a series of escalating consequences ("If you don't calm down, I'll call police; if you don't stop, you'll be charged; if you do that, you'll be arrested") creates a pressure cascade that activates the fight response in subjects who feel cornered. Each new ultimatum reduces the subject's options until they perceive fighting as the only escape from the consequence spiral. Instead, offer one clear choice with one clear consequence — once.

The second pattern is public correction — correcting or contradicting the subject's account of events in front of others. Even when the subject is factually incorrect, public correction activates the social humiliation response, which is one of the most powerful escalation drivers in human neuropsychology. Save factual correction for private or semi-private settings, or frame it as a question: "Help me understand — when you say the manager refused without explanation, do you know what he said?" This invites the subject to elaborate rather than defend, which keeps them in verbal engagement rather than defensive aggression.

The third pattern is mirroring aggression — involuntarily matching the subject's voice volume and pace when they become aggressive. This is a natural neurological response — human voice systems tend to synchronise — but it is catastrophic for de-escalation. Practice deliberately lowering your voice and slowing your pace when the subject's voice rises. This is a trained override of a natural reflex and must be practised in scenario drills until it becomes automatic. Supervisors listening to incident recordings or reviewing body-worn camera footage should specifically assess this pattern in officers who report difficulty with de-escalation — mirroring aggression is almost always visible and audible in the recording.

The Role of Physical Space in Communication

Proxemics — the study of how physical distance affects communication — is directly applicable to ABM verbal engagement. In Western interpersonal communication norms, the social zone (1.2–3.6 metres) is the appropriate distance for formal interaction with a stranger. Closer than 1.2 metres is the personal zone, reserved for friends and family, and entering it uninvited triggers an instinctive protective response in most subjects. Security officers who approach within 1 metre for verbal engagement are entering personal space, which activates a defensive response that is independent of the content of what they say. The 45° verbal positioning rule described earlier includes proximity management: maintain 1.5–2 metres during verbal engagement unless there is a specific operational reason to be closer.

The personal space bubble is also influenced by cultural norms and individual trauma history. Subjects from cultural backgrounds where personal space norms differ, and subjects with trauma histories involving physical violation, may have significantly different personal space thresholds. When in doubt, err on the side of greater distance during verbal engagement — this is always safer than too close, and it maintains the reactionary gap as an additional safety margin.

LEAPS Documentation — Capturing the Verbal Phase in the Post-Incident Report

The verbal de-escalation phase must be documented in the post-incident report not only because it establishes that verbal options were exhausted before force was used, but because the specific content of the verbal exchange may be directly relevant to the legal proceedings that follow. When the subject makes an admission during the verbal phase — "I have a knife" or "I just hit that guy" — that verbal admission may be admissible evidence. When the officer delivers a verbal command that the subject ignores — "Stop. Step back. Now." — the ignored command supports the argument that physical intervention was the only remaining option. Document verbal exchanges verbatim where possible, or as close to verbatim as memory permits, within the one-hour reporting window.

The LEAPS sequence, when fully applied, should be documentable in the report as a chronological sequence: "(L) I stopped 2 metres from the subject and faced him fully, giving visible attention to his complaint without interrupting for 90 seconds. (E) I said: 'I can hear that you're very frustrated about this.' (A) I asked: 'What would help resolve this for you right now?' (P) I reflected: 'So what I'm hearing is that you believe the decision was unfair and you want to speak to a manager — is that right?' (S) I said: 'Here is what I can do right now: I'll get the duty manager on the radio and have them come to you directly. Does that work?'" This level of LEAPS documentation demonstrates to any reviewing authority that the verbal phase was substantive and professional — not performative or minimal.

Physical force used by a private security officer without legal authority is assault — regardless of how reasonable the officer believed the action to be. Canadian criminal law does not recognise good intentions as a substitute for legal authority. This lesson maps the five statutory pillars that collectively define the legal authority to touch, restrain, or remove a person in Canadian private security operations. Every physical intervention you initiate must be traceable to at least one of these sections at the moment of action, not in retrospect.

The concept of proportionality unifies all five pillars. No section of the Criminal Code or the Trespass to Property Act authorises unlimited force. Every section is qualified by language requiring that force be "reasonably necessary," "proportionate," or used for a specific defensive purpose only. The practical application of proportionality is the objective bystander standard: a reviewing court or tribunal will ask what a reasonable person — with the same training, information, and circumstances as the officer at the moment of action — would have done. Not what was ideal in hindsight, not what the officer subjectively believed, but what a reasonable similarly-trained person would have chosen in the same real-time situation.

The Five Statutory Pillars — Tap to Reveal

Proportionality and the Objective Bystander Standard

All five sections share a single limiting principle: proportionality. The force used must be proportionate to the threat presented at the moment of action, assessed against the objective bystander standard. The courts applying this standard to security officers in Ontario have consistently held that the standard is prospective — assessed based on what the officer knew or could reasonably have known at the moment of the decision, not based on information discovered afterward. Adding post-incident information to justify the force used is retrospective justification, which is explicitly prohibited and has been used to invalidate otherwise-defensible use-of-force reports.

Canadian courts have applied the objective bystander standard to private security use of force in multiple contexts. In R. v. Asante-Mensah, 2003 SCC 38, the Supreme Court of Canada confirmed that the standard of proportionality in the Criminal Code applies to all persons using force under statutory authority, not only to police officers. This means the professional judgment standard for a licensed security officer — assessed against a similarly-trained officer in the same situation — is the applicable benchmark.

Distinguishing the Sections in Practice

Section 494 and the 2012 David Chen Amendment

The 2012 amendments to Section 494 of the Criminal Code are directly relevant to retail, commercial, and property security operations. Before 2012, a citizen's arrest under Section 494 required that the person be found committing an indictable offence. The David Chen case — in which a Toronto grocer detained a shoplifter who had robbed his store an hour earlier — exposed the limitation that security personnel and property owners could not make an arrest for an offence they had witnessed earlier unless the person was found committing it again at the moment of arrest. The 2012 amendment added the "fresh pursuit" provision: a person who is believed on reasonable grounds to have committed a criminal offence may now be arrested within a reasonable time after the offence if it was not feasible to make the arrest at the time and the person is being freshly pursued.

Fresh pursuit has both a temporal and a pursuit element. Temporal: "a reasonable time" has been interpreted by courts to mean minutes to hours in the immediate aftermath, not days. Pursuit: the arresting party must have been in active pursuit — maintaining visual contact, continuously attempting to detain — rather than having briefly lost sight of the person and then re-encountering them hours later. For security officers, the practical application is: if you observe an indictable offence, attempt the arrest immediately. If the person flees, pursue continuously and call police. Do not break pursuit and then attempt to re-arrest when the person is found later — that scenario requires police, not a citizen's arrest.

Minimum Force and the Proportionality Spectrum

All five statutory pillars authorise force only to the extent "reasonably necessary" — a phrase that embeds a minimum-force principle as well as a maximum-force limit. Proportionality in this context means the response must be the smallest force capable of achieving the lawful objective. If an escort hold achieves a trespass removal, a takedown is disproportionate even if a takedown was technically authorised. If a verbal command achieves compliance, any physical contact is disproportionate. This "minimum necessary" principle is not a suggestion — it is the operating constraint within which every force decision must be made.

The proportionality spectrum also applies to the duration of force as well as its intensity. Once compliance is achieved — the subject stops resisting and indicates willingness to cooperate — continuing to apply physical control at the same level used during active resistance is over-response. The force must de-escalate in real time as the subject's behaviour de-escalates. A subject who stops fighting and goes limp must be transitioned to a supported hold rather than a control hold within seconds. This is particularly critical in prone restraint situations where the continued application of bodyweight to a now-compliant subject creates positional asphyxia risk — the topic of Lesson 6.

When Multiple Sections Apply Simultaneously

Real-world use-of-force incidents rarely fit neatly into a single statutory category. A security officer removing a trespasser (TPA s.9 + Criminal Code s.25) who then attacks the officer creates a simultaneous Section 34 defence situation while the Section 25 trespass authority is still operative. In this scenario, multiple sections apply simultaneously and should be cited in the post-incident report as a compound authority: "I continued the trespass removal under Section 25 of the Criminal Code and TPA Section 9, and in response to the subject striking my forearm, applied a defensive two-handed wrist hold under Section 34 of the Criminal Code in defence of my person." The compound citation is more accurate and more defensible than selecting only one section, because it reflects the actual legal situation — multiple authorities converging at the same moment.

The only common error to avoid in compound citations is citing incompatible authorities. Section 27 (prevention of an offence) and Section 34 (defence of person) do not perfectly overlap: Section 27 applies before the offence is committed; Section 34 applies during or in the immediate aftermath. Citing both together for the same physical action may suggest confusion about when the authority was invoked. Understand the temporal sequence of your actions and the precise legal moment each authority became operative — then cite accordingly.

Building Legal Authority Fluency Through Scenario Practice

The ability to identify the applicable statutory authority in one to two seconds before initiating physical contact is a trained skill, not an innate ability. It is developed through repeated exposure to scenario descriptions paired with section identification — which is precisely what the ABM examination tests. The most effective practice method is to review the five-pillar comparison table, close it, and for each of the common security scenarios at your post, attempt to name the applicable section immediately. Gaming-floor physical altercation — Section 34 (defence of a third party). Banned person re-entering retail premises — TPA Section 9 plus Section 25. Subject caught shoplifting and fleeing — Section 494 (if caught in the act) or Section 27 (if in hot pursuit of a completed indictable offence). Subject who is about to smash a window — Section 27 (prevention of an imminent offence — mischief is an indictable offence under Section 430 of the Criminal Code).

Two common errors in section identification deserve special attention. Error one: confusing Section 25 with Section 27. Section 25 covers executing a lawful act — you are doing your job and the force supports doing it. Section 27 covers preventing an offence that hasn't been completed yet — the crime is in progress and you are stopping it. The key distinction is whether the force is directed at executing your function (Section 25) or at preventing an active crime (Section 27). Error two: applying Section 494 to non-indictable offences. Trespass, mischief under $5,000, and causing a disturbance are not all indictable offences — and for non-indictable offences, Section 494 does not apply. TPA Section 9 and Section 25 are the more appropriate authorities for trespass and disturbance removal.

A single officer attempting to physically restrain an aggressive adult subject has a significant chance of sustaining injury. Two officers using correct team geometry reduce that risk substantially — not merely by adding force, but by positioning that biomechanically eliminates the subject's ability to effectively resist. The geometry works because it controls both arms simultaneously, removes the subject's pivot options, and allows a coordinated forward take-down that uses gravity rather than opposing it. This lesson teaches the Contact and Cover model for verbal engagement and the clock-face model for physical intervention.

Team geometry is not merely a tactical enhancement — in many contexts, it is a legal expectation. The Ontario Use of Force Model recognises that the proportionality of a physical intervention depends in part on the resources available. An officer who attempts a solo restraint when a partner was available and could have been called, and who sustains injury or causes unnecessary injury to the subject as a result, faces questions about whether the solo approach itself was proportionate. Whenever a pre-attack cluster is identified, calling for Cover before physical contact is the correct protocol — not an optional improvement.

Contact and Cover: Verbal Phase Positioning

Even before physical contact, two-officer positioning matters. The Contact officer faces the subject, conducts the verbal engagement using LEAPS, and maintains eye contact. The Cover officer positions themselves approximately 45° to the rear of the Contact officer's strong-side shoulder — out of the subject's natural focus but close enough to support immediately. The Cover officer does not speak unless the Contact officer requires assistance or a new threat appears. This division of labour prevents the subject from using dialogue as a distraction while monitoring a threat from the second officer, and it gives the Cover officer undivided attention for environmental awareness — exits, approaching third parties, the subject's hands.

The Cover officer should never allow the subject to achieve direct face-to-face engagement with both officers simultaneously. When the subject turns toward the Cover officer, the Cover officer takes one step back, breaks eye contact, and redirects their gaze to the side — signalling that the Contact officer is the correct point of engagement. This keeps the geometry intact and prevents the subject from reading both officers' positions simultaneously, which would give them a tactical picture of both response options.

Two-Officer Restraint Geometry: The Clock-Face Model

When the decision to restrain has been made, the two-officer geometry uses a clock-face reference with the subject at the centre. Officer One takes a position at 10-o'clock (strong-side front quarter) and controls the subject's dominant arm. Officer Two takes a position at 2-o'clock (weak-side front quarter) and controls the subject's non-dominant arm. This creates a 120° bilateral arc of control. The critical rule is that neither officer ever positions at the lateral 4-o'clock or 8-o'clock positions because a subject who pivots in their direction becomes a direct-force vector. The absolute forbidden position is directly behind the subject — the crossfire axis — where one officer's response line passes through the subject and into their partner.

Before any repositioning, the moving officer announces the change verbally: "Moving to 2-o'clock." The stationary officer acknowledges: "Confirmed." This verbal coordination is not a courtesy — it eliminates the possibility of both officers repositioning into the same angle simultaneously, which would re-create the crossfire-axis problem from an unexpected direction. The take-down command ("take-down, three, two, one — lateral") is called exclusively by the Contact officer (Officer One). Unilateral take-down attempts by the Cover officer without coordination are the most common cause of officer injury in two-officer restraints.

Post-Take-Down Positioning

The take-down command ends with the instruction "lateral" — the instruction to move the subject to the lateral recumbent position is part of the take-down command sequence, not a separate step added afterward. By the time control is confirmed, the subject should already be on their side. The lateral recumbent position eliminates diaphragm compression from prone restraint, reduces aspiration risk if the subject vomits, and allows visual monitoring of the subject's respiratory effort and skin colour from the officer's safe position alongside.

Never leave a restrained subject prone face-down. Even a short period of prone restraint with weight on the torso creates positional asphyxia risk — the topic of the next lesson. The entire physical intervention protocol, from Contact and Cover through the take-down to the lateral recumbent position, is designed as a continuous sequence with the subject's medical safety built in at every stage.

Single-Officer Protocol When Cover Is Unavailable

The ideal two-officer response is not always achievable. A single officer who faces an actively aggressive subject when no Cover officer is available must apply a modified protocol that prioritises survivability and subject safety over achieving immediate control. The single-officer protocol begins with the same verbal pre-engagement: escalate your verbal command volume and directness to create a moment of hesitation, step back to re-establish the reactionary gap, call for police and any available backup simultaneously, and use any available environmental barrier — a desk, a counter, a parked vehicle — as a temporary physical separation. Do not attempt prone restraint as a solo officer: the positional asphyxia risk of a solo prone control without adequate monitoring is unacceptable unless the subject poses an immediate lethal threat.

Solo officer restraint, when unavoidable, should use techniques that allow the officer to maintain situational awareness: standing control holds with one hand controlling the subject's wrist and the other controlling the elbow, transitioning to a wall-supported escort if available, and never placing the officer's body in a position that eliminates visual contact with the subject's free limbs. Every solo restraint should be accompanied by a continuous verbal running account of the officer's actions and the subject's responses — partly for the subject's benefit (transparent communication reduces renewed resistance) and partly to create an audible record if body-worn camera or CCTV is capturing the incident.

Communication During Physical Intervention

Physical intervention does not end verbal communication — it transforms it. During a two-officer restraint, the Contact officer must maintain continuous verbal communication with the subject throughout the physical phase. This communication serves three distinct purposes. First, it gives the subject the opportunity to signal compliance — an important de-escalation tool during restraint itself, since a subject who is told clearly what compliance looks like and is given credit for each step of compliance is more likely to complete it. "I can feel you easing up — keep going, we're almost there" is more effective at producing full compliance than silence.

Second, ongoing verbal communication during restraint protects the subject's medical safety. A subject who stops verbalising during restraint — either from physical exhaustion, from positional asphyxia onset, or from a separate medical emergency — should be detected immediately because the baseline was a vocalising subject. When a subject who was shouting suddenly goes silent during prone restraint, that is a red flag requiring immediate medical screen — not relief. The silence should be checked: "Can you hear me? What is your name?" An absence of response after two attempts is an emergency. Third, verbal communication creates the documentary record: if body-worn camera or any recording system is capturing the incident, the officer's verbal commentary is the primary evidence of what the officer was observing and deciding at each moment.

The Role of Body Size and Physical Disparity

Physical disparity between the officer and subject is a relevant factor in the proportionality assessment of two-officer restraint. When a subject is significantly larger, stronger, or heavier than the officer, the amount of force required to achieve and maintain control is correspondingly higher — and the proportionality standard adjusts accordingly. A subject who weighs 250 pounds and is actively resisting two officers of average build may require a force level that would be disproportionate for a subject of 130 pounds in the same situation. Courts applying the objective bystander standard take physical disparity into account — a reasonable officer in the same physical situation would assess the available options against the same physical realities.

Physical disparity also affects positioning decisions. Against a significantly larger subject, the 10/2 clock geometry is more important, not less — the bilateral arc specifically leverages the officers' combined body weight and positioning against the subject's superior individual strength. A common error with large subjects is that one officer attempts to control both arms while the other attempts to apply downward pressure — this collapses the geometry and eliminates the biomechanical advantage. Maintain the clock geometry precisely regardless of the subject's size.

Maintaining Geometry Under Resistance

The 10/2 clock geometry is easiest to establish before physical contact and hardest to maintain after it begins. As a subject actively resists — pulling, twisting, pivoting, attempting to drive backward — both officers will experience pressure to abandon their positions and react instinctively. Instinctive reactive positioning almost always collapses the geometry, often creating accidental crossfire situations that look nothing like the trained technique when reviewed on camera afterward.

Maintaining geometry under resistance requires that both officers commit to the arc position verbally at the moment of first contact — "I'm on 10, confirm 2" — and do not break position unless they call it first. The only permitted exception is if maintaining position creates an immediate safety risk to the officer — for example, if the subject's environment changes unexpectedly (a staircase, a door opening). In that case, the officer breaking position calls it loudly: "Break 2, moving left" — and the Contact officer adjusts, calling a new confirmed position when they stabilise.

Position breaks that occur without verbal coordination are the primary cause of officer injuries during restraint. The body dynamics of two officers both moving simultaneously without coordination allow the subject to drive into the gap created between them, often breaking both holds simultaneously. Verbal coordination under pressure is a skill that requires practice in physical scenario drills — reading about it in a training module builds conceptual understanding, but physical repetition is what creates the automatic verbal discipline needed under adrenaline-level stress.

Positional asphyxia occurs when body position mechanically restricts the diaphragm's ability to expand, reducing or eliminating effective ventilation. In restraint contexts, the most common cause is a subject being held prone (face-down) with weight on the back or chest, or with the neck and chin forced into the chest. The mechanism is physiologically straightforward: the diaphragm cannot descend against the weight of the body and the external force applied by officers, and the subject suffocates despite having an unobstructed airway. There is no pain associated with the early stages of positional asphyxia — the subject may be unable to communicate distress, and the officer may not realise anything is wrong until clinical signs appear.

The medical and forensic literature on restraint-related deaths in Canada identifies positional asphyxia as the primary mechanism in a significant proportion of in-custody deaths. The Ontario Office of the Chief Coroner has issued recommendations following multiple inquests pointing to the same failure pattern: subject restrained prone, no immediate repositioning, no post-restraint medical screen, no EMS called. Each of these failures is individually correctable with the protocol taught in this lesson — and collectively, their absence has ended careers, triggered civil judgments, and, most importantly, ended lives.

Risk Factors That Compound Positional Asphyxia Risk

Positional asphyxia risk escalates significantly when any of the following are combined with prone restraint. Obesity increases abdominal mass, which restricts diaphragm descent further and can make even brief prone restraint dangerous. Drug or alcohol intoxication reduces the subject's physiological ability to signal distress — they may lose consciousness before showing the behavioural signs that would alert officers. Excited delirium — discussed below — is a distinct and severe medical emergency that dramatically accelerates the timeline to cardiac collapse. Physical exhaustion from prolonged resistance means the subject's metabolic reserves are already depleted when restraint is achieved, reducing their tolerance for any additional physiological stress. Pre-existing cardiac conditions and severe asthma or COPD are additional risk multipliers.

Any combination of two or more of these risk factors should trigger an immediate EMS call even before post-restraint medical screen findings — do not wait for cyanosis to appear when the risk profile alone warrants EMS involvement. The correct principle is: when in doubt, call EMS. The cost of an unnecessary EMS call is inconvenience. The cost of a delayed call is irreversible.

Excited Delirium — A Distinct Medical Emergency

Excited delirium is a medical emergency that must be identified before and during restraint, not only afterward. It is characterised by a cluster of signs: apparent superhuman strength out of proportion to the subject's body size (the subject can resist multiple officers with no apparent effort), imperviousness to pain stimuli (the subject does not respond to holds that would normally cause compliance through pain), incoherent speech or complete verbal absence despite appearing awake, extreme hyperthermia causing the subject to remove clothing in cold weather, and sometimes hallucinations or bizarre purposeless behaviour. When you observe any three of these signs simultaneously, call EMS before attempting physical restraint. If restraint has already begun, call EMS immediately and do not delay for the six-point screen — proceed directly to lateral recumbent and wait for EMS with the subject monitored and supported.

Excited delirium is recognised by the Ontario Office of the Chief Coroner as a cause of death in multiple coroner's inquest findings. Its pathophysiology involves extreme sympathetic activation, metabolic acidosis, hyperthermia, and elevated risk of sudden cardiac arrest. Physical restraint — even correctly executed — dramatically increases the metabolic demands on a subject already in physiological crisis, which is why EMS arrival before or during restraint is critical. Officers must communicate the excited delirium indicators to EMS precisely when requesting response so that the responding crew can bring appropriate advanced life support equipment.

The Post-Restraint Medical Screen — Six Required Checks

Immediately after control is achieved — before handcuffs are applied in all but exceptional circumstances, before subjects are searched, and before transport is arranged — conduct the six-point medical screen. This sequence must be applied in every post-restraint situation, not only in cases where the subject appeared distressed during restraint.

1. Lateral recumbent position. Roll the subject to their side the moment control is secure. The lateral recumbent position eliminates diaphragm compression, reduces aspiration risk if the subject vomits, and allows visual monitoring of respiratory effort and skin colour. 2. Respiratory rate. Count breaths for 10 seconds and multiply by 6. Normal is 12–20 breaths per minute. A rate below 12 or above 25 requires EMS. 3. Skin colour. Check lips and fingernails for cyanosis (blue discolouration indicating oxygen desaturation), pallor (possible shock), or mottling (circulatory compromise). Any of these findings requires immediate EMS. 4. Responsiveness. Speak to the subject by name at a volume slightly above normal: "Can you hear me? What is your name?" Absence of verbal response to a loud voice is a medical emergency. 5. Visible injuries. Scan for lacerations, abrasions, deformity from the restraint, or pre-existing injuries not caused by the restraint. Document what you find before transport — this establishes a baseline that protects both the subject and the officer in subsequent review. 6. Medical alert identifiers. Check for MedicAlert bracelets, medical tattoos, or prescription medication in accessible pockets. Diabetic hypoglycemia, severe allergic reactions, and epileptic seizures all present with signs that can be mistaken for intoxication or aggression. The identifier may be the only way to identify a medical emergency.

The Prone Restraint Prohibition — Evidence and Policy

Multiple Canadian and international law-enforcement and security regulatory bodies have moved toward strict limitations on prone restraint based on coroner's inquest findings and medical research. The Ontario Office of the Chief Coroner's recommendations following multiple in-custody death inquests have consistently identified prone restraint with positional weight as a proximate contributing cause of death. The mechanism is consistent across cases: subject is taken to the ground and held prone, officers maintain positional control, cyanosis appears but is attributed to exertion, EMS is delayed, cardiac arrest occurs before EMS arrives. The pattern repeats because each element of the failure chain — going prone, maintaining prone, attributing cyanosis to exertion, delaying EMS — individually seems justifiable to officers who lack the knowledge this lesson provides.

The evidence from forensic pathology is clear: a prone position with as little as 11 kilograms of additional pressure on the back can reduce maximum ventilatory volume by 25% or more in a healthy adult. In an obese subject, an intoxicated subject, or a subject with an existing respiratory condition, the reduction can be far greater. Combined with the metabolic oxygen debt already accumulated during active physical resistance, this ventilatory reduction can produce critical hypoxia in under five minutes of prone restraint — potentially in under two minutes in high-risk subjects. There is no scenario in security operations that justifies maintaining prone restraint beyond the time required to transition to lateral recumbent. Even partial compliance — a subject who is no longer actively fighting but has not yet fully complied — is sufficient to begin the transition.

The Lateral Recumbent Position — Correct Execution

The lateral recumbent position is not simply "on the side." Correct execution requires: (1) the subject's lower arm is extended forward at approximately 90° from the torso to prevent rolling back to prone; (2) the upper leg is bent at the knee and the knee is resting on the floor at approximately 90° to act as a base that prevents rolling forward to supine; (3) the head is in a neutral position aligned with the spine — not forced down toward the chest (which creates airway compression) and not extended backward; (4) no officer's body weight rests on the subject's torso, hip, or shoulders. This final point is the most commonly violated: officers who crouch behind a lateral-recumbent subject and rest a hand on the upper shoulder for control are applying force to the subject's lateral torso, which reduces the unobstructed respiratory benefit of the lateral position.

Control in the lateral recumbent position is maintained by one officer holding the subject's wrist from above at waist height — not by applying body contact to the torso. This allows effective visual monitoring of the subject's respiratory movement and skin colour from a safe position. A second officer maintains verbal engagement with the subject throughout the medical screen, which serves both monitoring and reassurance functions.

The Six-Point Medical Screen — Step-by-Step Protocol

The six-point post-restraint medical screen is conducted immediately after the transition to lateral recumbent. Its findings must be documented in the post-incident report regardless of whether anything abnormal is found — the absence of findings is itself a documented fact that establishes the screen was performed and is relevant to any subsequent medical or legal review.

Step 1 — Lateral recumbent position has already been addressed. Steps 2 through 6 are conducted simultaneously and continuously, not sequentially — you are monitoring all vital indicators at the same time. Step 2 — Respiratory rate: Count visible chest rise for 10 seconds, multiply by 6. A rate below 12 (slow, shallow, or absent) or above 25 (laboured, rapid) requires immediate EMS. Document: "Respiratory rate approximately X breaths per minute, [normal/abnormal]." Step 3 — Skin colour: Check the subject's lips, fingernail beds, and earlobes. Cyanosis (blue-purple discolouration) indicates oxygen desaturation and is a critical emergency. Pallor with mottling indicates circulatory compromise. Flushing with hot dry skin and confusion suggests hyperthermia. Any of these findings: call EMS immediately if not already en route. Step 4 — Responsiveness: Use the subject's name at a volume slightly above normal: "[Name], can you hear me?" Wait 5 seconds. If no response, try again at full voice. Unresponsiveness to loud voice after two attempts is a medical emergency — begin CPR assessment. Step 5 — Visible injuries: Scan the subject's accessible surfaces for lacerations, abrasions, deformity, swelling, or bruising. Document each finding with location and approximate size. This baseline protects both the subject and the officer — it distinguishes injuries that occurred during or before the restraint from those alleged to have occurred after. Step 6 — Medical alert identifiers: Check for MedicAlert bracelets, medical tattoos (particularly DNR tattoos, which have specific ethical implications), prescription medication in accessible pockets, and any written medical information the subject is carrying. Identify the treating medication if visible: warfarin users bleed more severely from minor injuries; insulin-dependent diabetics may present with hypoglycemia that mimics intoxication.

Communicating With EMS — What to Say and When

The EMS call following a restraint incident must include specific clinical information to allow the responding crew to bring appropriate equipment and to prepare their clinical approach before arrival. A vague EMS call — "I have a man down at [address]" — results in a standard first-response crew without advanced life support capability who may not have the equipment needed for a post-restraint excited delirium event. An informative EMS call — "We have a 35-year-old male, post-restraint, 90 seconds prone before transition to lateral. Signs include visible carotid pulse, elevated body temperature, and non-responsive to verbal contact. We are concerned about positional asphyxia" — results in an advanced response with appropriate equipment and preparation.

If the subject shows signs consistent with excited delirium, include this specifically: "Subject showed three signs consistent with excited delirium: apparent strength out of proportion to body size, non-response to pain stimuli, and hyperthermia indicated by clothing removal in [temperature] conditions." This information allows EMS to prepare IV access, cooling measures, and cardiac monitoring en route rather than after arrival — which may be the difference between successful intervention and a fatal delay.

Document the EMS call in the incident report: time of call, call taker identification if obtained, specific clinical information communicated, EMS arrival time, and EMS crew identification number if provided. This documentation is relevant to any subsequent coroner's inquest or regulatory review that examines the timeliness and content of the EMS notification as part of the overall incident response assessment.

A use-of-force incident that is lawfully conducted but poorly documented is a liability waiting to be discovered. The post-incident report is the primary document used by your employer, licensing regulators under the Private Security and Investigative Services Act, civil litigants, coroner juries, human rights tribunals, and the Ministry of the Solicitor General to reconstruct and evaluate your decision-making. A report that cannot survive that scrutiny ends careers and enables wrongful litigation. This lesson teaches the structure, language, and legal anchors of a defensible use-of-force report — and the trauma-informed principles that protect both subjects and officers in the aftermath of a critical incident.

Post-incident documentation is also a trauma-sensitive practice. The way a report is written affects the dignity of the subject, the clarity of the regulatory record, and the officer's own processing of the event. A factual, observable-language report treats the subject as a person in a specific situation rather than as a category of threat. It also protects the officer from the cognitive distortions that can accompany high-stress events — writing in sensory language requires the officer to return to the specific facts of the encounter rather than the emotional narrative that forms in the hours after a difficult call.

The Seven Required Report Elements

Every use-of-force report must contain seven elements. Missing any of these elements creates a deficiency that reviewing bodies will note. (1) Date, time, and location — the exact address or post identifier, not a building name alone. The time should be the time of each action, not just the overall incident time. (2) Subject description — physical description at the point of initial encounter, based on your observation, not on ID retrieved or confirmed later. (3) Observable behaviour in chronological order — what you saw, heard, or felt, using specific sensory language: "The subject raised his right fist to shoulder height and stepped toward me" — not "the subject became aggressive." (4) Legal authority — the specific section of the Criminal Code or Ontario statute that authorised each distinct physical action, cited by section number and statute. (5) Force response — each distinct physical action taken, in sequence, with duration where relevant: "I applied a two-handed wrist hold to the subject's right arm for approximately 20 seconds." (6) Subject response to force — how the subject responded to each action: complied, continued resistance, or ceased resistance. This element is what demonstrates proportionality — the subject's response tells the reviewer whether continued force was necessary. (7) Post-incident actions — medical screen conducted (with findings), EMS called (at what time), police notified, subjects released or detained, OHSA reporting obligations identified.

First-Person Sensory Language — the Standard

Reports must be written in the first person ("I observed," "I applied," "I heard") and in sensory language — what you saw, heard, felt, or smelled, not conclusions drawn afterward. Compare these two descriptions of the same event:

Version A (deficient): "The subject was aggressive and I restrained him because he was going to hurt someone."

Version B (defensible): "I observed the subject rotate his right shoulder back, extend his right fist toward my chest, and make contact with my sternum. I applied a two-handed wrist hold to the subject's right arm under Section 34 of the Criminal Code, R.S.C. 1985, c. C-46, in defence of my person, guided him forward and to his right, and transitioned him to the lateral recumbent position on the lobby floor."

Version B is defensible before a regulatory panel. Version A will be challenged at every level of review. The difference is not the length — it is the specificity of the observable behaviour and the presence of legal authority. A short, specific report with clear statutory authority is more defensible than a long narrative full of conclusion language.

Common Report Deficiencies — and How to Avoid Them

The most common deficiencies identified in professional review of Ontario security officer use-of-force reports are: Conclusion language without observable basis — words like "aggressive," "threatening," "erratic," and "dangerous" are conclusions that tell the reviewer what you decided about the subject, not what you observed. Replace every conclusion word with the specific sensory fact that led to it. Missing legal authority — physical force described without any statutory citation. No citation means no legal protection. Retrospective justification — adding information discovered after the incident to justify a decision made before you had that information. Courts consistently reject this practice because the objective bystander standard is applied to what the officer knew at the moment of action. Time gaps — periods of activity with no description, which invite the inference that something occurred that the officer did not want to document. Missing post-incident actions — no documentation of the medical screen, EMS notification, or reporting steps. This omission suggests either that these steps were not taken or that the officer did not consider them important.

Trauma-Informed Response — After the Incident

Trauma-informed practice in security acknowledges that aggressive behaviour is rarely random. Subjects who become physically aggressive are often in extreme distress driven by mental health crises, substance withdrawal, domestic violence, housing insecurity, or medical emergency. Understanding this does not change the officer's legal authority to intervene — it changes the officer's interpretation of the encounter and the way post-incident contact with the subject is managed.

When a subject has been restrained, they have experienced a significant loss of physical autonomy — which can itself be a traumatic experience, particularly for subjects with histories of trauma. The post-restraint interaction — the medical screen, the wait for police, the handoff — is an opportunity to restore a degree of dignity. Speak to the subject in a calm, non-threatening voice. Explain what is happening at each step: "I'm going to check that you're okay. Can you tell me your name?" This reduces the re-traumatisation risk of the post-restraint phase and reduces the likelihood of renewed resistance from a subject who feels they are being treated with respect.

Trauma-informed practice also applies to the officers involved. Officers who have participated in a use-of-force incident — particularly one involving medical emergency — are themselves experiencing a form of acute stress. The physiological activation of a physical confrontation does not resolve immediately when the subject is secured. Adrenaline remains in the bloodstream for 20–60 minutes after the triggering event. During this window, memory encoding is impaired, emotional regulation is difficult, and the risk of misinterpreting subsequent events is elevated. This is why the one-hour reporting window exists: it captures the sensory memory before it is contaminated by the residual stress response or by discussions with other officers.

The Regulatory Review Process — What Happens After the Report

In Ontario, a use-of-force incident involving a licensed security officer may trigger review by multiple bodies simultaneously. The employer conducts an internal incident review that may result in disciplinary action or retraining. The Registrar of Private Security and Investigative Services under the PSISA may conduct a regulatory review if the incident is serious, resulting in a licence condition, suspension, or revocation. If criminal offences are alleged, the Crown Attorney's office will conduct a review based on the incident report and witness accounts. If civil litigation is initiated, the report becomes a discoverable document reviewed by plaintiff's and defendant's counsel. And if a death or critical injury occurred, the Office of the Chief Coroner may conduct an inquest in which the officer is a witness and the report is a primary piece of evidence.

Understanding that the use-of-force report will be reviewed by multiple bodies with different standards and different questions is essential for writing it correctly. The internal review asks: did the officer follow policy? The regulatory review asks: was the officer's conduct consistent with the training and professional standards required by the licence? The criminal review asks: was there reasonable and probable grounds for each element of the criminal offence alleged? The civil review asks: what damages can be established? The inquest asks: what happened and what recommendations can prevent it from happening again? A report that is factually specific, legally cited, chronological, and written in sensory first-person language survives all five reviews. A report that is vague, conclusory, and missing legal citations may fail all five.

Memory Science and the One-Hour Reporting Standard

The recommendation to write a use-of-force report within one hour of the incident is grounded in cognitive neuroscience, not convention. Human memory — particularly memory for high-stress events — is reconstructive, not playback. In the hours and days after a stressful event, memory consolidation incorporates subsequent information, emotional reappraisal, conversations with others, and media exposure into the original encoding. What feels like recalling the event after 24 hours is actually recalling a partially reconstructed account. Within the first hour, immediately after the adrenaline response begins to subside but before the reconsolidation process has progressed significantly, the officer's sensory memory of the specific facts — sounds, visual details, physical sensations — is most accurate.

The second-hour degradation is not uniform: procedural and factual details (what was said, in what order) degrade more slowly than perceptual details (how large the subject appeared, how fast they moved). Emotional salience increases the confidence of memory while simultaneously decreasing its accuracy — officers who felt most threatened during an incident may be most confident and least accurate about the details that triggered their threat assessment. This is not dishonesty; it is the known mechanism of stress-memory encoding. Writing within one hour, from specific sensory observations rather than emotional impressions, is the practical solution.

Trauma-Informed Subject Interaction Post-Restraint

A subject who has just been physically restrained has experienced a loss of physical autonomy under duress. Even if the restraint was lawfully conducted and proportionate, the subjective experience of being held down is, for many people, inherently distressing — and for individuals with histories of trauma, it may trigger acute re-traumatisation. The post-restraint interaction sets the tone for everything that follows: the medical screen, the wait for police, the handoff, and the subject's subsequent account of the incident.

Trauma-informed post-restraint practice includes four elements. Announce your actions: "I'm going to check your breathing now. I'm placing my hand gently on your back." Unexpected touch from behind during a moment of high vulnerability activates a threat response. Announcing what you are about to do gives the subject's nervous system a moment to prepare. Use the subject's name: "John, can you hear me? I need you to tell me how you're feeling." Using the subject's name signals that you are interacting with a person, not managing a body. Acknowledge the experience: "I know that was very difficult. We're going to make sure you're okay now." This statement does not concede fault or apologise for a lawful action — it acknowledges the human reality of what just occurred. Maintain a calm, unhurried presence: Stay at the subject's level (crouch rather than stand over them). Keep your voice low, slow, and steady. Avoid turning away to speak to colleagues while the subject is still in a vulnerable position — even a brief moment of apparent inattention can be experienced as abandonment by a subject in an acute stress state.

Duty to Accommodate and Vulnerable Population Considerations

Security officers working in settings where they regularly interact with vulnerable populations — including persons with mental health conditions, elderly persons, persons with developmental disabilities, and unhoused persons — have an elevated obligation under the Ontario Human Rights Code, R.S.O. 1990, c. H.19, to accommodate those characteristics in how interventions are conducted. Accommodation in this context does not mean avoiding intervention — it means adjusting the approach to the intervention to account for the person's vulnerability where it is observable or reasonably apparent.

In practical terms: an elderly person with apparent balance instability should not be physically removed by a single arm grab that could cause a fall and fracture. A person who is visibly distressed and non-verbal should not be subjected to rapid escalating verbal commands that assume neurotypical processing. A person in an apparent mental health crisis should trigger a call for specialised response — police with crisis intervention training, or a mental health crisis team if your jurisdiction has one — rather than a solo security intervention. The Human Rights Code's accommodation obligation is independent of the PSISA's use-of-force training requirements; both apply simultaneously in every interaction.

Officer Wellness and the Long-Term Consequences of Cumulative Exposure

A single physical confrontation, even a minor one, activates a stress-response cascade that has measurable physiological consequences lasting hours and psychological consequences lasting days. Most security officers encounter dozens of confrontational situations across a career without physical intervention — and a smaller but significant number encounter multiple physical confrontations over months or years. The cumulative neurophysiological load of repeated stress activation without adequate processing and recovery is one of the primary mechanisms of occupational stress injury in safety and security professions.

Occupational stress injury in security officers presents differently from acute PTSD. Rather than a single traumatic event producing persistent symptoms, cumulative exposure produces a gradual erosion of stress tolerance, emotional regulation, and interpersonal functioning. Officers who have not received CISD or equivalent support after critical incidents often describe a progression: initially dismissing the incident as "just part of the job," then noticing increased startle responses and difficulty relaxing during off-duty periods, then noticing emotional numbing or irritability in personal relationships, and eventually experiencing performance degradation in the form of over-response to low-level incidents. Each stage is addressable if recognised early; each stage becomes progressively harder to address if ignored.

Employer obligations under the OHSA and the broader framework of Ontario's occupational health and safety legislation extend to psychological as well as physical health. The Workplace Safety and Insurance Board of Ontario recognises post-traumatic stress disorder as a compensable workplace injury for certain categories of workers — including those in security and related roles who are exposed to traumatic events as part of their duties. An officer who develops PTSD or a related occupational stress injury after a critical incident that was inadequately supported by the employer has a potential compensation claim. Employers who invest in CISD and ongoing officer wellness programs are not only meeting a duty of care — they are reducing their long-term liability under the WSIB framework.

Building a Culture of Transparent Incident Reporting

The quality of an organisation's use-of-force documentation culture is a function of the trust officers have that honest, complete reporting will be treated fairly by supervisors and management. In organisations where officers believe that accurate reporting of a use-of-force incident — including reporting mistakes or departures from protocol — will result in punitive consequences, the incentive is to under-report or to shade reports toward the most defensible version of events. This produces reports that are superficially compliant but do not accurately reflect what occurred, which defeats the regulatory and safety purposes of post-incident documentation.

A healthy reporting culture treats accurate, complete incident reports — even ones that include honest acknowledgment of decisions that did not go as planned — as evidence of professionalism, not as grounds for automatic discipline. Supervisors who respond to an officer's honest "I deviated from the protocol at Step 4 because of [specific reason]" with a coaching conversation rather than a disciplinary action build the trust that makes accurate reporting sustainable. The PSISA does not require perfect decision-making in every incident; it requires documented, proportionate, good-faith application of trained protocols. An honest report that acknowledges a departure and explains the reason for it is a demonstration of good faith. A report that conceals a departure is a potential fraud against the regulatory framework.