Operations Toolkit
Incident Response Playbook
A complete, step-by-step incident command system ensuring every security event is handled with consistency, legal precision, and full regulatory compliance.
What This Means for Your Department's Success
A complete incident command system — consistency, legal precision, full compliance.
Command every incident the same way
A step-by-step command system ensures every security event is handled consistently, no matter who responds first.
Protect the evidence and the case
Built-in legal precision and chain-of-custody steps keep your response admissible and your regulatory reporting clean.
Reduce response chaos
Clear roles and escalation paths cut the confusion that turns a contained incident into a crisis.
Demonstrate due diligence
Documented response procedures show regulators and insurers that your department operates to a professional standard.
One-time purchase
- Format
- Delivery
- Instant download
12 months of update notifications.
Overview
The Incident Response Playbook is a comprehensive operational guide designed specifically for casino security and operations teams managing high-stakes environments across Asia-Pacific. It provides more than 30 standardized incident protocols with sequential checkboxes, eliminating guesswork when seconds count and documentation matters.
From a patron injury on the gaming floor to a Judiciary Police coordination requirement, every protocol is built with Macau regulatory obligations at its core. The playbook establishes a four-tier classification system (Critical / Serious / Moderate / Minor) with color-coded severity indicators, enabling instant triage and resource allocation decisions.
Each protocol flows through detection, containment, escalation, documentation, and post-incident review. The playbook ensures consistent response regardless of which officer is on duty — protecting both patrons and the operation from the liability that inconsistent incident handling creates.
What's Inside
8 sections of structured content.
Foundation
Incident Response Framework
Foundation of professional incident management: incident command structure, roles and responsibilities, communication protocols, and escalation matrix guiding every protocol.
Triage
Incident Classification Matrix
Four-tier severity system: Critical (Red) — active threat, major injury, regulatory breach; Serious (Orange) — significant asset loss, assault, fraud; Moderate (Yellow) — disputes, minor injury; Minor (Green) — complaints, access violations.
8 Protocols
Physical Security Incidents
Complete response procedures for: assault, unattended bags/suspicious packages, trespass enforcement, theft and robbery, disorderly conduct, crowd control, vandalism, and parking incidents.
8 Protocols
Gaming Integrity Incidents
Specialised protocols for: suspected cheating, card marking, chip theft/counterfeit detection, dealer error, jackpot disputes, EGM tampering, collusion detection, and irregular betting patterns.
6 Protocols
Medical & Safety Incidents
Response procedures for: patron medical emergency, employee injury, hazardous material exposure, food safety incident, slip/fall, and mental health crisis.
4 Protocols
Regulatory & Legal Incidents
Protocols for: DICJ inspection arrival, Judiciary Police coordination, regulatory violation discovery, and legal hold documentation requirements.
4 Protocols
Emergency Situations
Catastrophic event protocols: fire, active threat, natural disaster, and bomb threat with evacuation, lockdown, and emergency service coordination procedures.
Appendix
Documentation Templates
Incident report forms, witness statement templates, evidence custody logs, chain of custody forms, and post-incident review documentation.
Regulatory alignment
Macau
Law 16/2001
Legal framework for gaming operations and compliance obligations
Macau
Law 16/2022
Updated gaming concession and regulatory compliance requirements
DICJ
Directives
Operational standards for incident reporting and investigation
Macau
Judiciary Police (PJ)
Established procedures for law enforcement liaison in criminal matters
Macau
Fire Services Bureau
Emergency response and evacuation requirements
Macau
Law 8/2005
Personal Data Protection Act — incident documentation and witness privacy
Why teams choose this
- ✅
Eliminates Inconsistent Response
Every incident type follows the same structured format: detection → assessment → response → documentation → review.
- ⚖️
Regulatory-Ready Documentation
Built-in compliance with 48-hour complaint reporting, DICJ protocols, and Judiciary Police coordination.
- 🔴
Instant Severity Triage
Four-tier colour-coded classification enables any officer to assess severity within seconds.
- 📋
Court-Defensible Evidence
Chain of custody logs, witness statements, and evidence documentation maintain legal integrity.
- ⭐
Emergency Situation Clarity
Run-Hide-Fight active threat, typhoon T1–T10 escalation, and CODE RED fire response.
- 📖
Reduced Training Time
New staff can reference step-by-step checklists from day one.
Built for
Primary audience
- Security Operations Managers
- Casino Operations Managers
- Surveillance Directors
Secondary audience
- Compliance Officers
- Risk Managers
- Floor Supervisors
- Training Managers
Frequently asked
- Is this playbook specific to Macau?
- All protocols are built with Macau regulatory obligations at their core. However, the incident response framework and classification system are applicable across Asia-Pacific jurisdictions.
- Can the protocols be customized?
- The PDF is a reference guide. For operational deployment, extract relevant protocols into your property-specific operations manual. Enterprise licensing includes editable Word versions.
- How does the active threat protocol align with local law enforcement?
- The Run-Hide-Fight protocol aligns with Macau Public Security Police Bureau guidance for active threat situations.
- What documentation templates are included?
- The Appendix includes: incident report forms, witness statement templates, evidence custody logs, chain of custody forms, and post-incident review documentation. These are suitable for legal proceedings and regulatory submission.
Often paired with
Build out the full operations stack.
Questions about this product? Email editor@surveillanceasia.com.
One-time purchase
- Format
- Delivery
- Instant download
12 months of update notifications.