CSS Cheat Sheet 2026

The 30 highest-yield CSS facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which of the following best describes the concept of 'residual risk' in security management? → The risk remaining after countermeasures have been implemented
2. Which metric is MOST useful for measuring the effectiveness of a security patrol program? → Percentage of scheduled patrol checkpoints completed on time
3. An access control card system shows that an employee badged in but did not badge out. This anomaly is called: → An antipassback violation
4. What is the primary purpose of a training matrix in a security organization? → To track which officers have completed required training and identify gaps
5. A security supervisor is asked to evaluate an officer's job performance. Which method provides the MOST objective assessment? → Comparing observed performance against specific, pre-defined post order standards
6. The 'perimeter control' concept during a crisis event means: → Establishing inner and outer boundaries to control access and protect the scene
7. Which of the following scenarios represents an 'opportunity-based' threat rather than a 'targeted' threat? → A burglar who notices an unlocked door and spontaneously enters a facility
8. Which of the following best describes a 'duty of care' obligation for a security supervisor? → The legal obligation to act reasonably to prevent foreseeable harm to others
9. When evaluating risks using a qualitative approach, a security supervisor would most likely use which tool? → Risk rating matrix with High/Medium/Low categories
10. Which federal law governs the interception of electronic communications and sets limits on surveillance activities by security personnel? → Electronic Communications Privacy Act (ECPA)
11. How should a security supervisor respond to identified risks? → By increasing employee numbers
12. How often should risk assessments and threat analyses be conducted? → Only during emergencies
13. Which method is most effective for identifying an individual security officer's specific training needs? → Combining performance observations, incident review, and officer self-assessment
14. Which type of security post is MOST effective for deterring crime at a large outdoor event? → High-visibility roving patrol
15. During a post-order briefing, a supervisor should PRIMARILY focus on communicating: → Site-specific duties, access rules, and emergency procedures
16. According to industry best practices, how often should security officers receive refresher training on use-of-force policies? → Annually at minimum
17. A security supervisor must maintain 'span of control.' In most security operations, the recommended supervisor-to-officer ratio is: → 1:5 to 1:7
18. When creating a staffing plan for a new security account, a CSS supervisor should first: → Conduct a site assessment to identify post requirements, hours, and coverage gaps
19. CPTED stands for Crime Prevention Through Environmental Design. Which of the following is an example of a CPTED principle? → Designing landscaping to eliminate hiding spots and improve natural surveillance
20. Under the Occupational Safety and Health Act (OSHA), security supervisors have a responsibility to ensure that: → The workplace is free from recognized hazards likely to cause serious harm
21. What is a 'security vulnerability' in the context of physical security? → A weakness in physical security measures that could be exploited by a threat
22. What is tailgating in the context of access control? → An unauthorized person following an authorized individual through a secured door
23. What is the role of a crisis communication plan? → To track performance
24. What is the role of communication in crisis management? → To track customer satisfaction
25. Which strategy BEST prevents 'liability creep' when security officers are asked to perform tasks beyond their defined duties? → Ensuring all duties are approved by management and documented in the service agreement
26. Which of the following is an example of risk transference? → Purchasing insurance to cover potential losses from security incidents
27. Which concept describes the use of multiple overlapping security measures to protect an asset? → Defense in depth
28. For security officers who are primarily visual learners, which training approach is most effective? → Demonstrations, diagrams, and video presentations
29. During a bomb threat, which action should a security supervisor take FIRST? → Notify law enforcement and follow established bomb threat protocols
30. Which document typically defines the legal authority, limitations, and responsibilities of a contracted security supervisor on a client site? → Post orders