Readers can sense when a scene ignores ordinary behaviour or makes technology perform magic.
Strong research gives a writer boundaries: what a guard could observe, what a public post can reveal, what remains uncertain and where mistakes enter. These limits sharpen suspense because characters must work with imperfect information. Physical security and digital evidence should be researched as connected systems, each containing people, routines, records and blind spots.
Begin With the Dramatic Question
Research is more efficient when it starts with the scene rather than the profession. "How does private security work?" is too broad. "Could an overnight guard know whether the same vehicle passed twice?" produces specific questions about patrol routes, lighting, attention, reporting and camera coverage.
Write down what the scene must accomplish, then separate that dramatic requirement from the method. This leaves room for a more credible solution if the original idea proves unrealistic.
Three questions help define the research:
- Who is responsible for noticing and recording the event?
- What information would exist at that moment?
- What could reasonably be misunderstood, delayed or lost?
Suspense rarely depends on perfect systems. It grows from incomplete views, competing interpretations and defensible choices made with limited facts.
Research Security as a Working System
A security guard is not a generic obstacle in a uniform. Duties change with the property, shift, risk level and written instructions for the post. A guard at a residential entrance may check visitors and deliveries. A mobile officer may inspect several properties, respond to alarms and document unusual activity. Event security, construction-site coverage and fire watch involve different priorities again.
Writers can study the vocabulary and division of roles described by real providers of security patrol services. Companies differ, but security is usually organised around a site assessment, assigned posts, patrol expectations, communication and incident records. Those elements give a fictional location internal logic.
Sketch the property, marking entrances, restricted areas, lighting, cameras and broken sight lines. Decide who legitimately moves through it and when. Then define the human layer: supervision, dispatch, visitor checks and alarm response. These details need not fill a page, but they must remain consistent.
Avoid the All-Seeing Guard
Fiction often makes guards impossibly observant or inexplicably careless. A believable guard has competing duties: watching an entrance, answering a call, checking a delivery or writing a report. Fatigue, noise and incomplete information can affect perception without making the character incompetent.
Observation is not interpretation. A guard may remember a blue jacket but misjudge its shade under poor lighting. An incident report reflects what someone saw, heard or was told; it does not automatically prove why an event occurred.
Establish lighting, workload and point of view before a crucial detail is missed. A mistake feels credible when it grows from the scene, not when the plot suddenly requires it.
Make Surveillance Useful but Incomplete
Cameras can strengthen a mystery without solving it instantly. Their value depends on placement, angle, image quality, time settings, retention and whether someone is watching live. A recording may show when a person entered a corridor but not what happened inside a room. Two cameras may cover adjoining areas while leaving the transition between them unclear.
For important scenes, note what each camera sees, what blocks its view and whether it records audio. Check whether device clocks agree before making minute-by-minute comparisons. A small timing difference can create a plausible contradiction.
Access logs and patrol reports also have limits. A key-card record may show that a credential was used, not who held it. Such distinctions produce better clues than an unexplained "deleted footage" cliché.
Understand the Life of a Digital Clue
Online content feels permanent, but many formats are designed to disappear or change. A story may be visible briefly, a caption may be edited and a public account may later become private. A screenshot preserves an appearance, not necessarily its complete origin or context.
When researching publicly available stories, an anonymous story viewer can illustrate the difference between public, time-limited material and content protected by account privacy. It should never be portrayed as a route into private profiles, direct messages or undisclosed information.
For fiction, record the life cycle of each digital clue:
- Who created or posted it?
- When did it become publicly visible?
- Who encountered it, and on what device?
- Was it saved, described or merely remembered?
- Could the original later be edited, removed or expire?
This prevents a character from relying on expired material without explaining how it was preserved.
Separate Discovery From Proof
A public post can direct a character's attention, but it does not automatically establish what happened. An image may be old, reposted, selectively framed or uploaded by someone other than the person shown. A location sticker may describe an event, not verify that the uploader was physically present.
Let investigators ask where the item came from, whether an original exists and what independent facts support it. Formal handling and admissibility require jurisdiction-specific research. In an amateur mystery, uncertainty itself can drive conflict.
Digital traces work best beside physical facts, witness accounts and a coherent timeline. They should narrow possibilities, complicate motives or expose inconsistencies rather than deliver a complete answer.
Join Physical and Digital Evidence on One Timeline
Place both research streams in one chronology containing the time, event, source, character who knows it and confidence level. A patrol note might place a vehicle near an entrance; a public story might show a distinctive reflection; a camera may confirm movement without identifying the driver.
Mark facts as confirmed, probable, disputed or assumed. Characters often mistake assumptions for facts, and that gap can power an entire act. During revision, ensure every character acts only on information they have received.
Interview Professionals Without Asking for Vulnerabilities
An expert can correct mistakes that desk research misses. Ask about the rhythm of a shift, reporting, communication, false alarms and the difference between policy and a busy night's reality.
Do not request confidential layouts, bypass methods or alarm weaknesses. If a scene depends on a vulnerability, invent the system and seek a safe, general review. Consult an appropriate specialist when the plot turns on verification or admissibility, noting the jurisdiction and interview date.
Put Research Into the Scene, Not a Lecture
Reveal procedure through pressure. A guard can hesitate before leaving a post instead of explaining orders. An investigator can compare two clocks and find the timeline misaligned. A character can reopen a saved image after the original story has vanished.
Choose details that affect action. Radio etiquette matters if a message is misunderstood; retention matters if a deadline is closing. Facts that do not change a choice, character or interpretation can stay in the notes.
Dialogue should reflect experience. Professionals may use precise terms with colleagues but simplify them for witnesses. Such differences turn exposition into characterisation.
Audit AI-Assisted Crime Writing
AI can organise timelines and identify continuity gaps, but it should not invent platform behaviour, security law or investigative procedure. Models may combine jurisdictions or turn possibilities into confident facts.
Check technical claims against current sources and test the timeline manually. Confirm that access to information is justified and remove harmful operational detail. Rewrite the scene in the book's established voice; research should support, not replace, judgement.
A Final Realism Checklist
Before completing the chapter, ask:
- Does the security setup match the location and its purpose?
- Are guards competent without being all-knowing?
- Does each camera or record have a defined limitation?
- Is public information clearly separated from private material?
- Can the character explain how a temporary digital item was preserved?
- Does every conclusion have more support than a screenshot alone?
- Does each character know only what the story has given them?
- Have operational vulnerabilities and unnecessary invasive detail been removed?
Authentic crime fiction is not a catalogue of equipment or apps. It is a study of how people notice, record, interpret and sometimes misunderstand events. When physical security and digital clues follow clear rules, the writer gains more than accuracy. Those rules create obstacles, uncertainty and choices, the raw material of suspense.
For plotting, drafting and revising the whole novel, see our complete guide to writing a book.
Frequently asked questions
How much security research does a crime novel need?
Enough to keep each scene consistent. Start from the dramatic question of the scene, then research who would notice and record the event, what information would exist at that moment and what could reasonably be misunderstood, delayed or lost.
How do I make a security guard character believable?
Give the guard competing duties, realistic limits on attention and a clear set of post instructions. Mistakes should grow from lighting, workload and point of view, not appear because the plot suddenly needs them.
Should CCTV footage solve the case?
Rarely. Placement, angle, image quality, clock settings and retention all limit what a camera shows. Footage that confirms movement without identifying a person, or clocks that disagree, makes a stronger clue than a complete recording.
Can a social media post prove what happened in my plot?
On its own, usually not. A post can be old, reposted, selectively framed or uploaded by someone else. Let characters ask where it came from and what independent facts support it, and treat it as a lead rather than proof.
What should I avoid asking security professionals?
Confidential layouts, bypass methods and alarm weaknesses. If a scene depends on a vulnerability, invent the system and ask for a safe, general review of whether it is plausible.