Freeze the security package and site brief
Begin by inventorying the proposed security services agreement, site or zone map, patrol schedule, access instructions, response procedure, incident form, communication tree, report template, invoice and adjustment record, safety instructions, and every addendum included with the package. Record the filename, version, sender, received date, and internal owner for each item. Preserve the originals rather than replacing them with one blended property summary.
Add a short site brief written by the property operations and facilities owners. Record the areas in scope, access points, patrol sequence, response contacts, incident owner, report workflow, charge inputs, safety handoff, and the person authorized to approve a business change. Keep this brief labeled as context so it cannot be mistaken for security language.
- Name the exact agreement, map, schedule, access, response, incident, report, and invoice versions under review.
- List every patrol, access, communication, escalation, report, safety, or adjustment instruction the package incorporates.
- Record the facilities, tenant-relations, security-coordination, finance, safety, and approval owners.
- Keep tenant conversations and site assumptions separate from source-backed terms.
Map each patrol through incident report
Draw the security sequence the operator can actually verify: access request, patrol start, checkpoint or observation, communication, event or exception, response step, incident record, tenant or owner notice, report, invoice, payment, and closeout. For each stage, identify the person and record involved and attach the proposed language or instruction that appears to describe it.
Leave a stage open when the package does not answer it. An expectation about access, patrol timing, response, communications, incidents, notices, reports, charges, or closeout should remain visibly separate from the proposed documents. The patrol-to-incident map is an operating fact record for counsel, not a conclusion about what the agreement requires.
- Use the property's real patrol and response sequence rather than a generic security checklist.
- Identify the document and exact source location behind every agreement-derived note.
- Name who can verify each access, patrol, communication, response, incident, notice, report, and payment event.
- Preserve a missing instruction, record, or owner as an open item.
Pair patrol facts, incidents, and charges with evidence
Create one source-linked table for every access event, patrol, checkpoint, communication, incident, response step, notice, report, charge, invoice, payment, and other security event the package describes. Useful rows may include access request, patrol, observation, communication, incident, response, notice, report, invoice, payment, and closeout. Keep each entry tied to its source language and label any internal estimate separately.
Then ask the people who will run the property to verify the sequence. Facilities can confirm access and site facts, tenant relations can confirm notices, security coordination can confirm patrol and response records, safety can confirm incident handling, and finance can confirm charges and payments. Counsel can inspect how those verified facts relate to the proposed language and identify the interpretation or drafting decisions still needed.
- Record each access, patrol, communication, incident, response, notice, report, invoice, or payment beside the event it appears to address.
- Separate stated terms from an internal patrol, response, or cost estimate.
- Name the owner of each access, patrol, incident, notice, finance, safety, and closeout step.
- Keep an undefined response path or missing report visible.
Test security changes before the handoff
Walk through several concrete property scenarios: an access point changes, a patrol route is revised, a communication contact changes, an incident is reported, a response step is delayed, a tenant notice needs review, a report is incomplete, a charge needs clarification, or the operator prepares to close out the security relationship. For each scenario, place the expected operations response beside the source sections and instructions that appear relevant.
Route each unknown to the right lane. Facilities can verify access and site facts, security coordination can confirm patrol records, tenant relations can confirm notices, safety can confirm incident facts, finance can confirm charges, leadership can own business choices, and counsel can address interpretation, drafting, and legal risk. Preserve the question when the source record or security decision is incomplete.
- What access, patrol, communication, incident, response, notice, report, charge, or closeout event is being tested?
- Which source passage or instruction appears to address it?
- Who can verify or approve the operator's business response?
- What interpretation or drafting judgment remains for counsel?
Give counsel one patrol-to-incident packet
The handoff should include the frozen document inventory, site brief, source-linked security path, incident-and-charge table, change scenarios, missing materials, and the owner of every open decision. Keep superseded schedules, incident records, and informal explanations available but clearly separate from the package counsel is being asked to review.
For each uploaded contract document, CounselOS can preserve source-linked clause extracts, surface playbook deviations, capture questions beside the relevant finding, and export selected material in a review packet. The patrol map and property records remain human-reviewed operating artifacts; CounselOS provides traceable contract evidence for the operator and attorney making the next decisions.
A note on legal judgment
This article describes a review and handoff workflow. It is general information, not legal advice. Contract meaning and acceptable risk depend on the agreement, the parties, and the applicable law; involve qualified counsel for legal decisions.