An officer at a retail post finds someone unresponsive in a stairwell, recognizes the signs of an opioid overdose, and reaches for a naloxone kit clipped to their belt. Whether that moment ends well for the company, and not just for the person on the floor, was decided weeks or months earlier — not by the officer’s training, but by whether anyone actually wrote a naloxone Narcan policy for security officers before that kit was ever issued. Most companies treat this as a training decision: do we teach officers to use it. The harder, prior questions are about authorization and liability, and skipping them is how a well-intentioned program turns into a legal problem.
Who actually approves an officer carrying it?
This can’t default to “the field supervisor thought it was a good idea” or “the officer bought their own kit.” A naloxone program needs sign-off at the company level — from ownership or whoever holds risk-management authority — because the decision carries insurance and liability implications for the whole company, not just the individual post. Some states have specific provisions addressing lay administration of naloxone, including for people acting in a professional or quasi-professional capacity, and whether and how those apply to a contract security officer varies by state and by the specifics of the program. This is not something to infer from a general sense of “Good Samaritan laws probably cover this.” It needs to be confirmed with counsel and with the company’s insurance carrier before the first kit goes out, and this article is not legal advice.
Does the client site actually allow it?
This is the question companies skip most often, and it’s the one that causes the most friction after the fact. A property manager or facility client may have their own policies, their own risk tolerance, and their own reasons — sometimes about liability, sometimes about the message it sends about what kind of activity happens on their property — for not wanting officers administering any medical intervention beyond basic first aid on their site. An officer who administers naloxone on a site where the client never agreed to that as part of the post’s scope has potentially exceeded the post’s authorized function, even if the intervention itself was medically appropriate and possibly life-saving. This has to be a documented, site-by-site decision, written into the post orders for that specific location, not a blanket company policy applied everywhere regardless of what the client expects.

What training does the policy actually require?
Once authorization at both the company and site level is settled, training is the more straightforward part — but “straightforward” doesn’t mean optional or informal. Officers carrying naloxone need instruction from a qualified source on recognizing an overdose, administering the specific product the company issues, and what to do immediately afterward, including that naloxone is not a substitute for emergency medical response and 911 still needs to be called. Training requirements and any certification expectations tied to this vary by state and by the specific naloxone program a company enrolls in, and should be confirmed with the training provider and, again, with counsel — not assumed based on what a different company in a different state is doing.
What happens immediately after an administration?
A policy that only covers the moment of administration and stops there is an incomplete policy. What happens in the minutes and hours after matters just as much: emergency services still get called regardless of how the person responds, the client site gets notified through whatever channel the post orders specify, and the incident gets documented completely — what was observed, what was administered, the time, and who was notified, while the details are still fresh rather than reconstructed later from memory. This record isn’t just internal housekeeping. It’s what the company, the client, and potentially the officer’s own legal protection will all depend on if the incident is ever questioned afterward.

Does the policy specify replacement and inventory?
A used kit that doesn’t get replaced quickly leaves the next shift without coverage, and a program that doesn’t track which posts have current kits — and which ones have expired or been used — isn’t really a program, it’s a one-time issuance that quietly decays. This is a logistics problem as much as a medical one, and it needs an owner within the company whose job includes checking kit status the same way someone checks that fire extinguishers haven’t expired.
Should every officer at every post carry it?
Probably not, and that’s worth saying directly. A blanket mandate across every post regardless of site risk, client authorization, or officer willingness creates exposure without a matched benefit — some sites have essentially no realistic scenario where it would come up, and mandating it there just adds a training and liability burden with no corresponding upside. The better approach treats this as a site-specific and role-specific decision made deliberately, the same way a company decides which posts carry other specialized equipment, rather than a company-wide rule applied uniformly because it seemed easier to administer.
What if an officer wants to carry one and the client says no?
This scenario comes up more than owners expect, usually because an individual officer has a personal reason to want the option available — a family history, a prior incident on a previous post, general concern about a site with known drug activity nearby. It’s a reasonable instinct, and it still doesn’t override a client’s decision about what’s authorized on their property. The right response isn’t to quietly let the officer carry one anyway, and it isn’t to dismiss the concern either — it’s to treat it as useful signal that the site itself may warrant a broader look at its risk profile and whether the client’s own policy should be revisited, through the account manager, not around them. An officer who carries naloxone against a client’s stated policy has put both themselves and the company in a worse position than one who never had the kit, regardless of how the individual case turns out.
Putting a naloxone Narcan policy for security officers in the right order
The sequence that actually protects the company runs: company-level authorization and insurance confirmation, then site-by-site client agreement written into post orders, then qualified training, then a clear post-administration protocol, then an inventory system that keeps kits current. Reverse that order — training officers first and figuring out authorization later — and a company ends up with officers equipped to act but no clear answer for who approved it or whether the client ever agreed to it on their property.
If your company is formalizing site-specific protocols like this one, post orders that spell out exactly what’s authorized at each location, and an incident reporting system that captures what happened immediately, are the operational backbone this kind of policy depends on. For emergencies where an officer needs to alert dispatch immediately, see how panic button alerts fit into the same response chain, or get in touch to talk through how your company documents protocols like this today.