Security Operations & Procedures Flashcards

What is the primary purpose of maintaining a security operations log?

Answer: To create a chronological record of events, incidents, and actions taken

Security logs provide an auditable chronological record that supports investigations, liability defense, and operational review.

A security officer observes two employees in a heated argument that appears on the verge of becoming physical. The BEST immediate action is to:

Answer: Verbally intervene to de-escalate while summoning backup

Verbal de-escalation with backup support balances safety for all parties while avoiding unnecessary use of force.

Under the principle of 'need to know,' access to sensitive security information should be:

Answer: Limited to those whose job functions require that specific information

Need-to-know limits information access to those whose duties genuinely require it, reducing insider threat exposure.

Which type of alarm system uses microwave or infrared beams to detect unauthorized entry into a protected space?

Answer: Motion detector

Motion detectors use passive infrared or active microwave technology to sense movement within a defined detection zone.

A 'two-person integrity' (TPI) rule requires that:

Answer: No single person has unsupervised access to critical assets or areas

TPI prevents insider threats and errors by ensuring a witness or check is always present when handling critical assets.

What is 'piggybacking' (also called 'tailgating') in physical security terms?

Answer: An authorized person allowing an unauthorized person to enter behind them through a controlled door

Tailgating exploits social courtesy to bypass access controls without triggering an alarm or authentication event.

When writing an incident report, a security officer should use language that is:

Answer: Objective, factual, and free of personal opinion

Objective, factual language ensures the report is credible, legally defensible, and accurately reflects observed events.