Response When a Lock Is Defeated or Bypassed After Service

Purpose

A customer calling to say the lock this shop serviced was just defeated is two problems wearing one phone call: the property may still be open right now, and somewhere behind that is a fault question the shop has to answer honestly, in either direction. Handled badly it goes one of two ways: a technician re-secures the door and quietly destroys the evidence needed to know what actually happened, or a technician settles the blame question on the doorstep under pressure, before the marks have even been read. This procedure keeps those two failures from happening by separating "make the property safe now" from "determine what failed and why," and by requiring the second question to wait for someone who was not standing on the porch when it was asked.

Without it a shop either eats liability it never owed, because nobody photographed the pry marks before replacing the strike, or ships a defect it never fixed, because a technician told an anxious customer "it's not us" before checking the screws.

Scope

Covers any report, within 30 days of a service visit, that the specific opening this shop worked on has been forced, bypassed, or otherwise defeated. Does not cover the rekey or pinning technique itself, owned by the Rekey and Lock Change SOP, or the strike-plate reinforcement upsell referenced there. Does not cover a mechanical malfunction with no forced-entry evidence, which routes to the relevant post-service troubleshooting card (a key that binds, a lock that sticks only in cold weather) rather than this incident procedure. Does not cover an unrelated break-in through a different opening the shop never touched, though the immediate re-secure step below still applies to any active break-in report on a serviced lock.

Roles and responsibilities

Procedure

Step 1: Triage for an active threat before dispatching anyone. Ask the caller directly: is anyone on the property now, does entry appear to be still in progress, has anyone called police. If any answer is yes or uncertain, the technician does not go first. The caller is told to call police, and dispatch calls back within 15 minutes once the caller confirms police have cleared the scene or that there was never anyone on it. Acceptance: the ticket records a cleared status, one of cleared, not called, or not applicable, before dispatch. Wrong looks like sending a technician to "make it safe" alongside an active police response. Stop rule: any ambiguity about whether an intruder may still be present holds dispatch until the 15-minute callback resolves it; do not send a technician into an unknown.

Step 2: On arrival, assess from outside before entering, even when invited in. If the interior visible from the doorway shows signs beyond the entry point itself (overturned furniture, an open interior door that should be closed, anything suggesting the space has not been walked yet), the technician does not go further in. Acceptance: the technician can state that the customer, or police, already walked the interior before the technician entered. Wrong looks like stepping past the customer to "take a look" at their invitation. Stop rule: any sign the interior has not been checked stops the technician at the threshold; back out, call police, wait for confirmation.

Step 3: Photograph before touching anything. Take the overall door and frame, a close-up of the defeat point, any tool marks, and the key if one is presented, all timestamped, before any part is removed or repositioned. This step exists because once the hardware is disassembled to re-secure the property, the physical evidence for the fault determination in step 4 is gone for good. Acceptance: the minimum photo set exists before disassembly. Wrong looks like re-securing first because the customer is cold or anxious, reasonable instinct, wrong order. Stop rule: if re-securing genuinely cannot wait (an exposed opening after dark in an unsafe area), narrate what you see into a phone recording before touching anything, and note the deviation and its reason on the ticket; never skip documentation entirely because the visit felt urgent.

Step 4: Read the marks against three categories before concluding anything. Category A, forced or pried entry unrelated to service quality: jamb spread, broken glass, driven hinge pins. Category B, a bypass exploiting an installation shortcut: a shimmed gap, undersized strike screws, a cylinder not fully seated. Category C, key-based entry: no forcing or bypass marks, opened with a working key, which is not a workmanship question but a key-control one, an unauthorized key exists somewhere. Acceptance: the technician names a category and can point to the specific marks, or their absence, supporting it, including a direct check of the strike screws and hinge security, the two most common hidden shortcuts. Wrong looks like guessing without checking hardware specifics. Stop rule: if the evidence does not confidently fit one category, do not conclude on site; photograph everything and route to the lead for a second read rather than telling the customer a verdict from the doorstep.

Step 5: Re-secure immediately regardless of category, and rekey rather than repair when Category C is suspected. The property does not stay open while fault is investigated. Replace or reinforce whatever failed, verify the door locks and holds under a firm two-hand push at the latch and bolt, and where key-based entry is suspected the re-secure must include a fresh rekey, not just a hardware fix, because reinstalling the same bitting leaves the same unauthorized key working. Acceptance: door holds under the push test, and for Category C the delivered-key count from the original service ticket is checked against what the customer says they still hold before a new cut goes out. Wrong looks like fixing the strike and jamb while leaving the original bitting live when key-based entry is the likely cause. Stop rule: if the original key count cannot be confirmed, default to rekeying rather than assuming the delivery record was complete.

Step 6: Separate the finding from the disclosure, and let only the lead deliver a fault conclusion. The technician tells the customer the specific physical observation, never a verdict: "the strike screws are three-quarter-inch, not the three-inch upgrade screws, and that's what let the jamb give," rather than "not our fault" either way. The lead reviews the photos the same business day and confirms the category before any liability statement goes back to the customer. Acceptance: customer given the physical basis on site, plus a stated follow-up window; formal finding held for the lead. Wrong looks like a technician settling the question alone under doorstep pressure, either admitting fault to calm someone down or denying it to end an argument. Stop rule: any spoken commitment beyond the observed marks and the follow-up window is walked back by the technician immediately, on site, rather than left standing until the lead can correct it.

Step 7: Notify the insurer or bond the same business day whenever Category B or C is plausible, or the customer signals intent to file a claim. Do not wait for certainty of fault. Acceptance: notification logged with date and contact. Wrong looks like waiting for the lead's final determination before telling the shop's own insurer a claim may be coming. Stop rule: a customer statement indicating they intend to involve their own insurer or file a police report naming the shop triggers notification regardless of the lead's private read of fault.

The record this produces

Photo set from before disassembly, the category call with its physical basis, the re-secure log including the push test result, the rekey confirmation and old-key void test for Category C, the lead's same-day sign-off, the customer disclosure log, and any insurer notification with its date. Readers later: the owner reviewing a pattern, the insurer, and the next technician who touches that opening.

Worked pass: a deadbolt rekeyed eleven days earlier

A residential customer, rekeyed 11 days prior, comes home to a door standing open. Police were already called and cleared the scene before the shop was contacted, satisfying step 1. Step 2 passes on arrival: the customer confirms the interior was already walked, technician proceeds to the door.

Step 3 nearly fails. Eager to help a customer standing outside in the cold, the technician starts backing out the two strike-plate screws to inspect the jamb before taking a single photograph. He catches himself mid-turn, per this SOP's requirement, and stops. Rather than pretending the screws were never touched, he photographs the strike and jamb in their current state and notes on the ticket that two screws were partially backed out before documentation, disclosing the gap instead of hiding it.

Step 4: the marks show original three-quarter-inch builder screws in the strike plate, jamb wood split around the holes, no tool marks on the cylinder face, deadbolt itself undamaged. This reads clearly as Category A, forced entry through the frame, unrelated to the pin work performed 11 days earlier, which touched only the cylinder, not the strike.

Step 5: the technician installs a security strike plate with three-inch screws, the same upgrade recommended and logged, but not required, at the original rekey, and confirms it holds under the push test. Step 6: he gives the customer the specific finding, screw length and jamb condition, and the follow-up window; the lead reviews the photos that afternoon, confirms Category A, and calls the customer with the finding. Step 7: no insurer notification, since the fault reads unrelated to the shop's work and the customer has not indicated a claim against the shop. The strike upgrade bills as ordinary repair work, not a warranty correction.

References

• Rekey and Lock Change SOP (owns pinning technique and the strike-plate reinforcement upsell referenced in step 5)
• Identity and Authority Verification Before Any Work SOP (owns the delivered-key count check referenced in step 5)
• See related: post-service troubleshooting cards for mechanical, non-forced failures (a key that binds after rekey, a lock sticking only in cold weather), which are a different diagnosis than this incident procedure
• ALOA Security Professionals Association guidance on service records supporting a liability finding