The opening walk is where an unusual condition first becomes an operating decision. AI-generated editorial illustration; not documentary evidence of an open unit, facility event, customer, responder action, or result.
A seven-gate response for protecting people, preserving facts, and returning the unit to controlled status
The opening walk is usually quiet: test the gate, scan the drive aisles, look for water, glass, blocked exits, or a light that should not be on. Then you turn a corner and find a unit door raised several inches. The latch is exposed. The lock may be missing, lying nearby, or still hanging in a way that does not make sense.
The most damaging first move is often the most natural one: walk over, lift the door, look inside, and try to “fix” the condition.
Do not start there.
An open unit door is an observation, not a conclusion. It may be an authorized move, a contractor error, a customer still on site, a mechanical failure, an incomplete lock change, or a potential crime scene. The facility manager does not yet know which explanation is correct. Touching the door, stepping into the unit, moving a lock, or rearranging property can create a safety problem, disturb useful evidence, expose private contents, and make the later timeline harder to trust.
The operator’s first job is not to solve the mystery. It is to keep people safe, preserve the first reliable facts, and move the condition through a controlled decision path.
Gate 1: stop at the observation boundary
Pause at a safe distance. Do not cross the threshold, reach under the door, move objects, test the latch, or handle a lock. Do not take broad photographs of the unit’s contents simply because the door is open.
From the common area, note only what is reasonably visible without changing the scene:
- the exact time and location;
- the door position and whether it appears stable;
- the visible latch and lock condition;
- people, vehicles, carts, or active work nearby;
- obvious hazards such as smoke, water, sparking, structural damage, or a person in distress; and
- how the condition was discovered.
If site policy permits a verbal welfare check from the common area, announce your presence without entering. Do not confront a person, block an exit, or turn a safety check into an interrogation.
This boundary matters because the scene is still ambiguous. A manager who decides too early that the unit was burglarized may communicate a false fact. A manager who decides it was merely left open may erase the very details needed to understand what occurred.
Gate 2: separate the emergency branch
Before checking accounts or cameras, ask whether there is an immediate threat to life or safety. A person who appears injured, a credible threat, smoke, fire, exposed electrical equipment, active forced entry, or another urgent condition belongs in the site’s emergency process. Call emergency services when the situation warrants it, give an accurate location, and follow the facility’s emergency plan. Keep yourself and others out of danger.
If there is no immediate emergency, prevent casual approach without creating a larger hazard. That may mean placing a staff member at a corridor entrance, redirecting customers to another route, or temporarily restricting the smallest practical area. Do not block a required exit or trap someone inside a controlled area. If you cannot manage the boundary safely, escalate to the designated manager or emergency contact.
Emergency planning works best when the communication path and initial responsibilities have been established before the event. This is not the moment to invent who calls, who meets responders, or who protects the office.
Gate 3: open one controlling incident record
Create one incident record as soon as the immediate safety branch is stable. Use the facility’s approved system, not a personal note app or an informal group chat. Give the record a unique identifier and record the first observation before later explanations influence it.
Separate facts by source:
- Observed: what the manager saw or heard directly.
- System record: what an access log, work order, account note, or camera timestamp shows.
- Reported: what a customer, employee, vendor, or responder said.
- Decision: who authorized the next action and why.
- Completion: what was actually done, by whom, and when.
Do not combine these into a single sentence such as “Customer left the unit open after moving out.” That statement may contain three unverified assumptions. A better record says the door was observed open at 7:12 a.m.; the account showed a scheduled move-out; the customer had not yet been reached; and no cause had been established.
Gate 4: preserve evidence without becoming an investigator
Managers need enough information to route the incident, but they should not conduct an improvised forensic examination. The National Institute of Justice’s crime-scene guidance is written for law enforcement and other responsible responders, not as a self-storage manager’s field manual. Its relevant operational lesson is narrower: protection and preservation matter because careless activity can change a scene.
Preserve what your policy authorizes. Record the camera names and time window that may be relevant. Protect footage from routine overwrite through the approved process. Retain access-log references, work-order identifiers, alarm events, and the original incident entry. Do not export footage to a personal device, circulate screenshots, or allow everyone on shift to browse the customer’s unit and account.
Physical security guidance from the Cybersecurity and Infrastructure Security Agency treats monitoring, logs, and incident coordination as connected controls. At a facility, that means the access log is one source—not a verdict. A valid code use does not prove who entered. Missing video does not prove nothing happened. A work order does not prove the work was completed. Preserve each source with its time, owner, and limitation.
If law enforcement becomes involved, follow their direction and the facility’s escalation policy. Record the agency, responder, event or report number if provided, instructions received, and the person who received them. Do not claim that a report was “filed” merely because a call was placed.
Gate 5: reconcile authorized activity before changing the unit
Check the few systems that can explain legitimate activity:
- the tenant account and authorized-contact record;
- move-in, move-out, transfer, auction, overlock, and lock-cut notes;
- open work orders and vendor check-ins;
- employee assignments and shift notes;
- access events for the relevant area and time; and
- available camera views under approved access controls.
The goal is not to search everything. It is to test whether a documented, authorized activity accounts for the condition. If a vendor was scheduled, confirm that the vendor actually arrived, had access to this unit, and closed out the work. If an employee says a customer was moving, confirm the unit number and the status of that interaction. If the account appears vacant, do not assume the contents are abandoned or that the facility may take possession.
One person should own the reconciliation. Parallel calls and duplicate notes create conflicting timelines. Other employees can gather assigned facts, but the controlling incident record should show the source of each fact and the current decision owner.
Gate 6: communicate without exposing the customer
Use the approved contact information and identity-verification process. Share the minimum information needed to address the condition. A practical first message is that the facility observed the unit door in an unsecured position at a stated time and needs to confirm authorized activity and next steps.
Do not email wide photographs of the contents, speculate that a theft occurred, identify neighboring tenants, or disclose camera details that are not necessary for the conversation. The Federal Trade Commission’s business guidance emphasizes knowing what personal information a business holds, limiting retention, protecting it, and restricting access to people with a legitimate need. An open unit does not suspend those controls.
Record each contact attempt, channel, time, outcome, and promised follow-up. “Voicemail left” is not customer confirmation. “Customer reached” is not authorization to move property. “Police contacted” is not responder disposition. Keep the states separate.
Gate 7: authorize the physical action and release
Closing the door and adding a lock may feel protective, but either action can be wrong if a person is inside, the door is unstable, property is caught in the opening, law enforcement wants the scene unchanged, or the facility lacks authority over the unit. The incident owner should identify who can authorize physical action under the rental agreement, company policy, applicable law, and any responder instruction.
Before anyone touches the door, record:
- the authority relied upon;
- the person giving approval;
- any safety or responder conditions;
- the person assigned to perform the action;
- the required witness or camera coverage, if policy calls for it; and
- what will count as successful completion.
The unit is not controlled merely because the door looks closed. Release requires a readback: the door is physically secure; the latch and lock state match the authorized instruction; the unit number is confirmed; the common route is clear; required evidence references are retained; the tenant-account and incident notes agree; and any customer, management, insurance, legal, or law-enforcement follow-up has an owner and due time.
If one condition remains unresolved, leave the incident open. A shift change does not erase ownership. The handoff should name the current restriction, the last verified fact, the next decision, the responsible person, and the deadline.
The operator tool: Unsecured Unit Discovery Control Card
Use the companion control card on the next shift. It turns the response into seven decision gates:
- Observation boundary: no entry, touching, or avoidable exposure.
- Emergency branch: immediate threats routed through the emergency plan.
- Incident control: one record, one identifier, one owner.
- Evidence preservation: approved logs, footage, and references protected with limits.
- Activity reconciliation: authorized work and account state checked by source.
- Communication control: verified contacts, minimum disclosure, distinct outcomes.
- Physical release: authority, action, readback, follow-up owner, and due time recorded.
The blank register is designed for real use. The companion Pine Vale Storage entry is an explicitly fictional teaching example; it does not describe a real facility, customer, incident, responder, or result.
Fictional example: the fact that changes the decision
At the fictional Pine Vale Storage, a manager sees Unit C-114 open about eight inches during the morning walk. The manager stops outside the corridor, records the time, confirms there is no visible emergency, and restricts the short aisle. The account shows a move-out scheduled for the prior evening, but that fact alone does not explain the open door.
The work-order system then shows a lock-cut request assigned to a vendor. The vendor check-in record confirms arrival, but the work order has no completion note. The manager calls the approved vendor contact, who reports that the technician stopped when a property cart blocked the unit and left without performing the cut. That report is recorded as reported information, not observed fact.
Camera review by an authorized manager shows a customer opening C-114 later that evening; the available angle does not show who handled the door afterward. The facility contacts the tenant through the approved number. After identity verification, the tenant confirms an interrupted move and asks to return. Management defines the access and securing steps under site policy, records the authorization, and keeps the incident open until the door and lock receive a physical readback.
The useful result is not that the first theory was right. It is that the team did not let an incomplete work order, a scheduled move-out, or an ambiguous camera view become a false conclusion.
An open door is a control problem before it is a story
Managers are expected to act quickly, but speed does not require guessing. The disciplined response is simple: protect people, freeze the first facts, preserve approved evidence, reconcile authorized activity, communicate narrowly, obtain authority, and verify release.
That sequence protects the customer and the facility at the same time. It also gives the next manager, regional leader, insurer, attorney, or responder a record they can understand without reconstructing the morning from scattered texts and memories.
The door may be the first thing you see. The operating system behind the response is what determines whether the facility makes the condition safer—or makes it harder to resolve.
Sources
- National Institute of Justice, Crime Scene Investigation: Guides for Law Enforcement. Accessed October 10, 2026.
- Federal Trade Commission, Protecting Personal Information: A Guide for Business. Accessed October 10, 2026.
- Cybersecurity and Infrastructure Security Agency, Catalog of Recommendations for Physical Security. Accessed October 10, 2026.
- Ready.gov, Emergency Plans. Accessed October 10, 2026.
Author
Jared Mastroianni is Chief Operating Officer of modSTORAGE and CEO and Founder of Facily.ai.
Editorial disclosure
Pine Vale Storage and every associated person, unit, timestamp, system event, contact, statement, decision, and outcome are fictional and are included only to demonstrate the operating method. The article provides an operations framework, not legal advice, law-enforcement procedure, emergency-response certification, or authorization to enter, search, secure, or take possession of a unit. Follow the rental agreement, company policy, approved emergency plan, responder direction, and applicable law.
Companion operating tools
These governed companion materials are rendered accessibly because this WordPress instance does not accept the source Markdown and CSV files as media uploads. Blank templates and fictional examples are operating aids, not proof of a real facility event, deployment, customer, result or compliance state.
unsecured unit discovery control card
Use this card when a self-storage unit door, latch, or lock is found in an apparently unsecured condition. It is an operational decision aid, not authorization to enter, search, move property, investigate a crime, or take possession.
Gate 1 — Observation boundary
- Stop in the common area; do not enter or reach across the threshold.
- Do not move the door, latch, lock, or contents.
- Record time, location, door position, visible lock condition, nearby people or vehicles, obvious hazards, and discovery source.
- Photograph only under policy and only what is necessary; avoid broad exposure of contents.
Pass when: the first observation is recorded without changing the condition.
Gate 2 — Emergency branch
- Check for a person in distress, credible threat, smoke, fire, sparking, structural damage, active forced entry, or another immediate hazard.
- Activate the approved emergency plan and emergency services when warranted.
- Restrict the smallest safe area without blocking required egress or trapping anyone.
Pass when: immediate life-safety action is underway or no immediate emergency is observed.
Gate 3 — Incident control
- Open one approved incident record and assign a unique ID.
- Name one incident owner.
- Separate observed, system-recorded, reported, decided, and completed facts.
Pass when: one controlling record and one current owner exist.
Gate 4 — Evidence preservation
- Preserve authorized camera windows before overwrite.
- Record camera names, access-event references, work-order IDs, alarm events, and original notes.
- Keep footage and customer data in approved systems; no personal-device exports or broad circulation.
- If responders are involved, record agency, responder, event/report number if provided, instructions, and recipient.
Pass when: relevant approved records are protected with source and limitation noted.
Gate 5 — Activity reconciliation
- Check tenant and authorized-contact status.
- Check move-in/out, transfer, auction, overlock, lock-cut, vendor, and work-order records.
- Check employee assignments, access events, and approved camera views.
- Confirm assigned work was actually performed; scheduled or checked in does not mean completed.
Pass when: authorized activity explains the condition or the unresolved gap is explicit.
Gate 6 — Communication control
- Use approved contact data and identity verification.
- Share the minimum needed condition, time, and next step.
- Do not speculate, expose neighboring customers, or distribute unnecessary images of contents.
- Record every attempt, channel, time, outcome, promise, and follow-up owner.
Pass when: communication state is documented without overstating confirmation or authority.
Gate 7 — Physical action and release
- Identify the authority for touching, closing, locking, or otherwise changing the unit.
- Record approver, instruction, safety/responder conditions, assigned person, and witness requirement.
- Complete a physical readback of unit number, door, latch, lock, route, evidence pointers, and matching system notes.
- Assign each remaining follow-up an owner and due time.
Pass when: the authorized action is physically verified and every unresolved item has an owner and deadline.
Stop conditions
Stop and escalate if a person may be inside, the door is unstable, property is caught, immediate danger exists, forced entry may be active, responders want the condition preserved, authority is unclear, identity cannot be verified, or the physical readback fails.
State discipline
Keep these separate: discovered, restricted, emergency call placed, responder arrived, report/event number received, customer contacted, identity verified, authorization received, action assigned, action completed, readback passed, released, and follow-up closed.
unsecured unit discovery register fictional example
unsecured unit discovery register fictional example
- incident id
- FIC-2026-1010-01
- facility name
- Pine Vale Storage (fictional)
- unit number
- C-114
- discovered at
- 2026-10-10 07:12 ET
- discovered by
- Mara Ellis (fictional manager)
- discovery source
- Opening walk
- door position
- Open approximately eight inches
- visible latch state
- Latch visible; not touched
- visible lock state
- No lock visible from common area
- nearby people or vehicles
- None observed
- obvious hazard
- None observed
- threshold crossed or item touched
- No
- initial photo policy basis
- Facility incident-photo policy; contents excluded
- emergency condition
- None observed
- emergency action
- No emergency activation required
- emergency call at
- restricted area
- Short C corridor restricted
- egress checked
- Yes
- incident owner
- Mara Ellis (fictional manager)
- observed facts
- Door open approximately eight inches at first observation
- system facts
- Account showed scheduled move-out; vendor work order lacked completion; access and camera references preserved
- reported facts
- Vendor contact reported technician left without performing lock cut; tenant later confirmed interrupted move
- decision facts
- Management required tenant verification and authorized securing plan before contact with door
- completion facts
- Door and lock later checked under fictional site procedure; readback completed
- camera sources
- C-corridor camera 2 (fictional)
- camera window
- 2026-10-09 17:00 ET to 2026-10-10 07:30 ET
- preservation completed at
- 2026-10-10 07:28 ET
- preservation owner
- Devon Price (fictional regional manager)
- access event references
- Fictional access events AE-4471 and AE-4479
- work order references
- Fictional work order WO-8824
- authorized activity status
- Authorized move-out existed but did not fully explain door condition
- tenant contact attempt at
- 2026-10-10 07:34 ET
- tenant contact channel
- Approved phone number
- identity verified at
- 2026-10-10 07:49 ET
- minimum disclosure summary
- Observed unsecured door; confirmation and next-step request
- responder agency
- None
- responder event or report number
- None
- responder instruction
- None
- physical action authority
- Fictional rental agreement and company policy
- physical action approver
- Devon Price (fictional regional manager)
- physical action assignee
- Mara Ellis (fictional manager)
- physical action completed at
- 2026-10-10 08:18 ET
- readback unit confirmed
- Yes
- readback door latch lock
- Passed fictional physical check
- readback route clear
- Yes
- readback records aligned
- Yes
- follow up owner
- Devon Price (fictional regional manager)
- follow up due at
- 2026-10-10 12:00 ET
- current state
- Released with follow-up open
- released at
- 2026-10-10 08:22 ET
- release approved by
- Devon Price (fictional regional manager)
- final notes
- Entire row is fictional and demonstrates state separation; it is not a real facility incident or result
unsecured unit discovery register template
unsecured unit discovery register template
- incident id
- facility name
- unit number
- discovered at
- discovered by
- discovery source
- door position
- visible latch state
- visible lock state
- nearby people or vehicles
- obvious hazard
- threshold crossed or item touched
- initial photo policy basis
- emergency condition
- emergency action
- emergency call at
- restricted area
- egress checked
- incident owner
- observed facts
- system facts
- reported facts
- decision facts
- completion facts
- camera sources
- camera window
- preservation completed at
- preservation owner
- access event references
- work order references
- authorized activity status
- tenant contact attempt at
- tenant contact channel
- identity verified at
- minimum disclosure summary
- responder agency
- responder event or report number
- responder instruction
- physical action authority
- physical action approver
- physical action assignee
- physical action completed at
- readback unit confirmed
- readback door latch lock
- readback route clear
- readback records aligned
- follow up owner
- follow up due at
- current state
- released at
- release approved by
- final notes
