GIS for Crime Analysis Training Course

Duration 10 days 19 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Crime Analyst, Intelligence Analyst and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-SLE-041

Before you join: Participants should be comfortable working with spreadsheets or tables containing incident, location, date and offence fields.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Crime data becomes operationally useful only when analysts can locate incidents accurately, test whether apparent patterns are meaningful, and communicate findings in forms that command staff and field teams can act on. Poorly geocoded records, inconsistent offence classifications, unsuitable map scales and untested hotspot claims can misdirect patrols, investigations and prevention resources. GIS gives crime analysts a disciplined way to connect incidents, calls for service, offenders, victims, assets, transport networks and environmental risk factors.

This course develops the spatial analysis methods used in crime and security analysis units. Participants prepare incident data, apply coordinate systems, build geodatabases, geocode addresses and assess positional and attribute quality. They produce choropleth maps, proportional-symbol maps, kernel density surfaces, grid analyses and temporal pattern displays. The programme then moves into spatial statistics, including Moran's I, Getis-Ord Gi*, nearest-neighbour analysis and spatial autocorrelation, before applying journey-to-crime, near-repeat, network and risk-terrain approaches to operational questions.

Teaching combines instructor briefings, guided software demonstrations, crime-analysis cases, group interpretation of outputs and structured planning for participants' own agencies. Cases reflect policing, municipal security, transport security, financial crime and critical-infrastructure protection. Participants build an evidence-led crime analysis product throughout the course, finishing with a documented analytical briefing containing maps, methods, findings, limitations and recommended actions. The course is delivered over 10 instructor-led days, in the classroom or live online, and includes a certificate of completion.

The course is suited to analysts and security professionals who already work with incident records, operational reports or location-based risk information and need to produce defensible spatial analysis for decision-makers.

What you will be able to do

  • Prepare crime and security datasets for spatial analysis using documented quality controls
  • Geocode incident records and diagnose positional, matching and address-standardisation errors
  • Produce operational crime maps using appropriate classification, symbology and scale choices
  • Calculate and interpret hotspot patterns using kernel density estimation and grid analysis
  • Test spatial patterns with Moran's I, Getis-Ord Gi* and nearest-neighbour analysis
  • Analyse temporal, near-repeat and network-based crime patterns for deployment decisions
  • Develop risk-terrain models linking crime events with environmental risk factors
  • Present a documented GIS crime-analysis briefing with actionable recommendations

Benefits of attending

For you

  • Produce hotspot maps that distinguish concentration from random clustering
  • Assess whether apparent crime patterns pass spatial-statistical tests
  • Build repeat-location and near-repeat analyses for investigative prioritisation
  • Explain map limitations, data quality issues and uncertainty to decision-makers
  • Compile a portfolio-quality GIS crime-analysis briefing

For your organisation

  • Improves patrol, prevention and investigation targeting with tested spatial evidence
  • Reduces reliance on misleading raw incident counts and poorly classified maps
  • Creates repeatable workflows for incident geocoding, hotspot analysis and reporting
  • Strengthens auditability of analytical recommendations used in security decisions
  • Links crime patterns with facilities, transport routes and environmental risk factors

Course modules

19 modules over 10 days

Participants can frame a crime or security problem as a focused spatial analysis question.

  • Crime analysis products for tactical, strategic and administrative decision support
  • SARA model applied to recurring crime and disorder problems
  • Translating commander requests into measurable spatial and temporal questions
  • Incident, offender, victim and place data relationships
  • Geographic unit selection: address, street segment, grid and neighbourhood
  • Analytical claims, assumptions and limitations recorded before mapping

Participants can configure a GIS workspace and select suitable spatial data structures.

  • Vector, raster and network datasets used in crime analysis
  • Point, line and polygon representations for operational incidents
  • Feature classes, layers, tables and relational joins
  • Map projections and coordinate reference systems for local analysis
  • Scale, extent and resolution effects on crime-map interpretation
  • ArcGIS Pro and QGIS interface functions for analytical workflows

Participants can design a geodatabase structure that supports repeatable crime analysis.

  • Incident-level data model with identifiers, timestamps and classifications
  • Offence coding crosswalks between local categories and NIBRS fields
  • Unique identifiers for incidents, calls, persons and locations
  • One-to-many relationships between incidents and multiple offences
  • Domain values and validation rules for controlled attributes
  • Metadata records covering source, refresh date and known limitations

Participants can assess crime-data fitness and document limitations affecting conclusions.

  • ISO 19157 data-quality dimensions applied to incident datasets
  • Completeness checks for missing dates, coordinates and offence codes
  • Positional accuracy assessed against verified reference locations
  • Duplicate-record detection using identifiers, dates and location fields
  • Reporting bias, underreporting and enforcement-generated data distortions
  • Audit trail requirements for reproducible spatial analysis

Participants can geocode records, measure match quality and correct common location errors.

  • Address standardisation before batch geocoding incident records
  • Locator matching scores and manual review thresholds
  • Intersection, landmark and postcode geocoding limitations
  • Reviewing unmatched records through source-system and address checks
  • Offset settings and their effects on street-segment maps
  • Geocoding sensitive locations without revealing protected addresses

Participants can assemble contextual layers needed to interpret crime locations accurately.

  • Administrative boundaries, beats and sectors for accountability reporting
  • Road networks, transit stops and pedestrian access routes
  • Land use, parcels and building footprints as environmental context
  • Schools, licensed premises and critical assets as reference layers
  • Population and daytime-footfall denominators for rate calculations
  • Layer currency and source authority documented for operational maps

Participants can produce clear exploratory maps that support accurate pattern interpretation.

  • Graduated symbols for incident counts at discrete locations
  • Choropleth classification using natural breaks, quantiles and equal intervals
  • Rate maps calculated with population, households or exposure measures
  • Colour schemes chosen for sequential, diverging and categorical data
  • Map layouts containing title, legend, scale, source and date
  • Small multiples used to compare offences, areas and periods

Participants can identify and compare crime hotspots using appropriate density methods.

  • Fishnet grids built at operationally meaningful cell sizes
  • Kernel density estimation with documented bandwidth and cell-size choices
  • Comparing density surfaces across offences and reporting periods
  • Hotspot boundaries interpreted without false precision claims
  • Weighted incidents incorporating harm scores or severity values
  • Threshold rules for identifying priority hotspot areas

Participants can test whether observed crime concentrations differ from random spatial patterns.

  • Nearest-neighbour index for point-pattern dispersion assessment
  • Global Moran's I for overall spatial autocorrelation
  • Local Moran's I identifying high-high and low-low clusters
  • Getis-Ord Gi* statistics for statistically significant hotspots
  • Spatial weights matrices based on distance, contiguity and neighbours
  • P-values, z-scores and multiple-testing cautions in hotspot reporting

Participants can analyse time-based crime patterns alongside their geographic distribution.

  • Time series built from daily, weekly and monthly incident counts
  • Seasonality separated from long-term trend using moving averages
  • Temporal aggregation chosen to match operational decision cycles
  • Space-time cube analysis for emerging pattern detection
  • Heat charts comparing hour, day and offence category
  • Temporal windows documented to avoid misleading period comparisons

Participants can identify repeat-event patterns for targeted prevention and investigation.

  • Repeat-address analysis using standardised locations and time windows
  • Near-repeat patterns measured by distance and interval thresholds
  • Repeat victimisation rates calculated by person, premise and asset
  • Incident linkage indicators for serial offending hypotheses
  • Temporal decay considered when prioritising repeat-event responses
  • Prevention actions aligned with repeat-location problem mechanisms

Participants can use street and transport networks to assess movement and accessibility risks.

  • Network datasets prepared with restrictions, turn rules and impedance
  • Service-area analysis for patrol coverage and response reach
  • Shortest-path analysis between incidents, facilities and suspect locations
  • Journey-to-crime assumptions, distance decay and origin uncertainty
  • Street-segment analysis for corridor crime and transit risks
  • Barriers, permeability and guardianship considered in route interpretation

Participants can build a risk-terrain model linking crime patterns with place-based factors.

  • Risk terrain modelling distinguishes risky places from event concentrations
  • Risk factors selected through theory, evidence and local knowledge
  • Distance bands and spatial influence zones for risk features
  • Reclassifying factor surfaces into comparable risk values
  • Weighted overlay methods for composite environmental risk scores
  • Validation against holdout incidents and operational observations

Participants can combine GIS evidence with intelligence products while protecting sensitive information.

  • Intelligence cycle linked to spatial collection and assessment requirements
  • Entity-location-time links represented through relational data structures
  • Threat, vulnerability and consequence mapped for protected assets
  • Confidence statements attached to source-derived geographic assessments
  • Sensitive-source handling through aggregation, masking and access controls
  • Analytical indicators distinguished from confirmed operational facts

Participants can translate spatial findings into proportionate deployment and prevention options.

  • Directed patrol areas selected from hotspot persistence and harm measures
  • Patrol allocation compared against demand, travel time and coverage
  • Problem-oriented policing responses aligned with SARA findings
  • Situational crime prevention measures mapped to opportunity structures
  • Before-and-after evaluation designs for targeted interventions
  • Displacement and diffusion of benefits assessed spatially

Participants can communicate spatial findings clearly to operational and executive audiences.

  • Analytical briefing structure: question, method, finding, implication and action
  • Map annotations highlighting priorities without overstating certainty
  • Executive dashboards separating indicators, alerts and explanatory analysis
  • Operational recommendations assigned owners, locations and review dates
  • Uncertainty statements covering data gaps, bias and analytical limits
  • Briefing questions anticipated through documented method choices

Participants can apply privacy and governance controls to crime and security mapping outputs.

  • Purpose limitation applied to incident, victim and offender data
  • Data minimisation principles for analytical extracts and map products
  • Aggregation techniques reducing re-identification risk in public reporting
  • Role-based access controls for sensitive geodatabases and layers
  • Retention schedules and disposal procedures for analytical datasets
  • Disclosure review checks before publication or external distribution

Participants can establish a repeatable GIS workflow for routine analytical production.

  • Workflow stages from data intake through briefing distribution
  • Standard operating procedures for recurring hotspot products
  • Quality-assurance checklist covering data, methods, maps and recommendations
  • Version control conventions for geodatabases, projects and outputs
  • Refresh schedules aligned with operational reporting cycles
  • Peer review criteria for analytical validity and communication quality

Participants can build, review and present a complete GIS crime or security analysis briefing with defensible recommendations.

  • Problem statement defining decision owner, scope and analytical question
  • Cleaned incident dataset with documented geocoding and quality checks
  • Context layers selected to test plausible environmental risk factors
  • Hotspot, temporal and spatial-statistical outputs compared for consistency
  • Operational recommendations linked to findings, constraints and responsible owners
  • Peer review against evidence, privacy, cartography and briefing criteria

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Crime-data quality assessment checklist
  2. Incident geocoding and correction workflow
  3. Hotspot analysis method-selection guide
  4. Spatial-statistics interpretation template
  5. GIS crime-analysis briefing template
  6. Operational deployment recommendation model

Who should attend

  • Crime Analyst — needs defensible hotspot, trend and repeat-victimisation analysis
  • Intelligence Analyst — needs spatial evidence for tactical and strategic assessments
  • Police GIS Specialist — needs crime-specific methods beyond general cartography
  • Security Operations Manager — needs location-based evidence for patrol and asset decisions
  • Municipal Safety Officer — needs to target prevention activity in high-risk locations
  • Transport or Infrastructure Security Analyst — needs to assess incidents across networks and sites

Skills and tools covered

Crime data preparationHotspot analysisSpatial statisticsNetwork crime analysisRisk terrain modellingOperational map design

Tools and standards

ArcGIS Pro, QGIS, CrimeStat IV, SARA model

How the course runs

Training methodology

Short instructor briefings introduce each method before participants apply it to realistic incident and security datasets. Software demonstrations are followed by case work on geocoding, hotspot interpretation, spatial statistics, repeat events and network patterns. Group exercises require participants to challenge assumptions, compare analytical outputs and defend operational recommendations. Simulations model briefing discussions between analysts, commanders and security managers. Participants progressively develop an analysis product, using application-planning sessions to adapt methods, data fields and reporting formats for their own workplace.

Requirements and prerequisites

Participants should be comfortable working with spreadsheets or tables containing incident, location, date and offence fields. Prior experience with crime analysis, security reporting, policing operations, municipal safety or intelligence work is helpful. Participants should understand basic percentages, rates and charts, and be able to interpret simple maps. No prior GIS programming, spatial-statistics qualification or advanced mathematics is required. The course introduces required GIS functions and analytical calculations before applying them to crime and security cases. Participants may bring non-sensitive sample data if their organisation permits its use.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should be comfortable working with structured data and basic maps, but they do not need advanced GIS expertise. Core GIS functions are introduced before they are used for crime-analysis tasks.

Bring a laptop if attending live online and, where permitted, a non-sensitive sample of incident or security data. Do not bring personally identifiable, classified or operationally sensitive data unless your organisation has approved its use.

It is designed for crime analysts, intelligence analysts, police GIS staff, municipal safety teams and security analysts. It also suits managers who oversee location-based prevention, patrol or asset-protection decisions.

General GIS courses focus on mapping and spatial-data management across many subjects. This course applies GIS specifically to incident patterns, hotspots, repeat events, spatial statistics, patrol coverage and crime-prevention decisions.

Participants can adapt the data-quality checks, geocoding workflow, hotspot methods and briefing structure to recurring reports. The capstone provides a model for producing a documented analysis product for commanders or security managers.

Each day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes data, mapping and hotspot methods; the second week develops statistical, network, risk and operational applications before the final capstone briefing.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.