Which of the following is a step the security guard should take when investigating security incidents?

Detecting the incident is a crucial first step for a security guard when investigating security incidents. This involves observing and recognizing any unusual activity or circumstances that may signify a security breach or disturbance. Detecting an incident allows the guard to assess the situation appropriately and determine whether further action is needed, such as reporting to law enforcement or conducting a more thorough investigation.

This step also ensures that the guard is responding to actual events rather than making assumptions. Early detection enables prompt action, which can be critical in mitigating the consequences of a security threat. By effectively recognizing an incident, security personnel can gather accurate information and provide a better account of events, which is essential for any subsequent investigation.

The other options involve actions that are taken after an incident has been detected, making them relevant but secondary steps in the overall incident investigation process.