You Can Tell a Cowboy Outfit the Moment Something Actually Happens
Anyone can look professional on a quiet night. What separates a properly run security operation from a cowboy outfit only shows once something actually goes wrong.
By Michael Bryce · 28 September 2026 · 4 min read
Anyone can look the part on a quiet Tuesday. Clean uniform, a nod on the way in, a rota that says the right number of people are on site. It tells you almost nothing about whether a company is actually any good.
The tell comes when something happens. A fight breaks out, a fire alarm goes off, someone goes missing from site, a client rings up furious about something that happened three hours ago and wants to know exactly what your team did about it. That is the moment the difference between a properly run operation and a cowboy outfit stops being theoretical.
What the cowboys have in common
I have seen enough of both sides of this industry to know the pattern. It is rarely about effort. Most people turn up wanting to do a decent job. It is about whether there is any structure underneath them when things speed up.
Nobody knows who is actually on site. The rota says one thing, reality says another. Someone swapped a shift on WhatsApp last Thursday and it never made it back to the official record. When an incident happens, the first question, "who do we have there right now," takes longer to answer than it should.
Information dies with whoever heard it first. A radio call goes out, someone deals with it, and unless they happen to write it up properly at the end of the night, that is the only record that ever existed. Ask what happened a week later and you get someone's memory of a busy shift, reconstructed after the fact.
The client finds out slower than they should. A cowboy outfit's default is to sort it internally first and explain later, usually only when asked. That looks like control from the inside. From the client's side it looks like being kept in the dark about something on their own premises.
Nothing gets checked afterwards. No one goes back through what happened, when, and whether the response was actually good. The same gaps get repeated because nobody structured a way to notice them.
None of this makes the individual staff bad at their jobs. It makes the operation fragile the moment it is tested, which is exactly when it matters most. And the frustrating part is that this fragility is usually invisible to the company running it. Everything feels fine on a normal week, so there is never an obvious moment to fix it. It only surfaces when a client, or worse the police, asks a direct question the company cannot answer cleanly.
What a properly run operation does differently
The better operators I know are not running fewer incidents. They are running the same incidents with a structure underneath that holds up under pressure.
They know who is where, in real time, without asking. Not "the rota says," but an actual live picture of who has clocked on, where they are, and whether anyone has gone quiet who shouldn't have. That single fact, answered instantly rather than worked out under pressure, changes how fast everything after it moves.
Every step of an incident gets logged as it happens, not reconstructed later. Who was told what, when, and what they did about it. Not because anyone expects trouble, but because a timeline built at the time is accurate, and a timeline built the next morning is a guess dressed up as a record.
The client sees what the team sees. Not a phone call after the fact summarising what someone remembers, but the actual record, available when they want to look at it. That is a harder standard to hold yourself to, and it is exactly why it builds trust.
Someone reviews it afterwards. Not to catch people out, but because a response that goes reasonably well still has something in it worth improving, and you only find that by actually looking.
Why I built Dispatcher Mode around this
This is the exact gap Dispatcher Mode is built for. It gives you a live picture of where your team actually is, and it builds the incident timeline as things happen rather than leaving someone to reconstruct it from memory once the shift has calmed down. It is one of TacDesk's paid add-ons, sitting on top of any plan, because it is genuinely a different job to running a rota: it is running a live operation while it is live.
I do not think the gap between the two kinds of operator is about money or headcount. I think it is about whether you have built anything that holds up before you need it to. A cowboy outfit finds that out in the moment, in front of a client, with no record to fall back on. A properly run one already knows.
If you want to see what that looks like in practice, TacDesk is guard management software for UK security companies. It handles scheduling, digital reporting, compliance records and live incident tracking in one place, including through Dispatcher Mode. You can try it free at tacdesk.co.uk.
Michael Bryce
Founder of TacDesk. Writes about SIA compliance, operations, and running a UK security company — from someone who actually works the shifts.
Connect on LinkedIn →See TacDesk in action
Win contracts, pass SIA audits, and run your whole operation from one place. Book a free 30-minute demo.
Book a Free Demo