Definition

A records-and-analytics concept defining how information is managed, measured, and communicated in law enforcement organizations. It governs collection, retention, disclosure, privacy protection, and performance measurement using defined data and reporting processes. It does not excuse poor data quality and must respect confidentiality limits and lawful disclosure requirements. It supports accountability and operational improvement by making performance and compliance visible to supervisors and the public where appropriate. The concept is generally stable, though analytic methods and disclosure expectations evolve over time.

Principle

Principle
Identify stable and adaptable elements of an offender's approach (entry methods, tools, victim approach, timing) and separate instrumental choices (MO) from expressive or ritualized acts (signature); account for learning and variation over time.

Demonstration

Demonstration
Analysis shows a bank robber consistently uses a specific verbal distraction, places a marked prop on the teller counter, and flees by the same vehicle type; those recurring operational choices form the MO used to link incidents and anticipate actions.

Misapplication

Misapplication
Treating incidental or opportunistic behaviors as core MO, or conflating signature behaviors with MO; overfitting small datasets to a rigid profile can mislead investigators when offenders adapt.

Consequence

Consequence
Proper MO analysis aids case linkage, suspect prioritization, surveillance planning, and risk assessment by predicting likely offender behaviors and narrowing investigative hypotheses.

Reversal

Reversal
Variability-focused analysis that emphasizes change and unpredictability, or signature analysis that centers on emotional or ritualistic components rather than practical methods.

Boundary

Boundary
Covers behavioral operational choices in committing crimes; does not by itself establish identity or motive and must be integrated with forensic, digital, and contextual evidence for firm conclusions.

Semantic Tension

Semantic Tension
Tension exists with Case Linkage Analysis: MO describes how a crime is committed, while linkage requires integrating MO with corroborative signals; excessive focus on MO can miss alternative linking evidence.

Synthesis

Synthesis
Modus Operandi Analysis is the disciplined identification of repeatable operational behaviors and techniques used by an offender, distinguishing functional methods from expressive acts to support linkage and investigative prediction.