A) Speed of contract signing B) Lowest bid from contractors C) Contractor reputation, licensing compliance, and personnel training records D) Number of guards available this month
A) Conduct an audit of all personnel files and implement corrective registration and training actions B) Fire the negligent staff immediately C) Ignore it if no incident occurred D) Blame outsourced HR
A) Number of arrests made B) Average daily patrols logged C) Client satisfaction surveys only D) Percentage of personnel with up-to-date certifications, completed training hours, and records of disciplinary actions
A) Use risk assessment results, stakeholder input, and mandatory provisions of RA 11917 to create measurable SOPs and training plans B) Copy SOPs from a competitor C) Keep SOPs informal to allow flexibility D) Make SOPs only for supervisors
A) Invest in prioritized training for key skills and minimum equipment upgrades ensuring competence and compliance B) Upgrade CCTV only C) Delay both until next fiscal year D) Hire more administrative staff
A) Refuse, explain legal/professional limits, propose compliant alternatives, and document the interaction B) Ignore the request C) Comply to keep the client D) Implement but keep it undocumented
A) Immediately integrate rules into SOPs, train staff, and create monitoring KPIs with audit schedules B) Only update senior management C) Announce them once to staff D) Wait for enforcement visits
A) Terminate the night shift supervisor instantly B) Analyze root causes, update training, adjust schedules, and implement supervisory spot-checks to prevent recurrence C) Ignore since violations are minor D) Transfer the guards to day shift
A) Prioritize corrective documentation practices, assign owners, and run weekly compliance reviews until stable B) Hide gaps from inspectors C) Assume auditors won’t notice D) Do nothing until an inspection occurs
A) Suspend pending a fair investigation, document findings, coordinate with the licensing authority if required, and follow due process B) Ignore the complaint C) Terminate immediately without investigation D) Defend the officer publicly without investigation
A) Fire personnel and keep it secret B) Blame the client C) Conduct transparent internal review, communicate corrective measures to stakeholders, and update training/policies D) Deny involvement and stay silent
A) Share biometrics openly with clients B) Install without policies C) Use biometrics only for some staff inconsistently D) Develop data protection procedures, obtain consent, limit access rights, and train personnel on privacy obligations
A) It’s standard practice everywhere B) It may incentivize improper conduct; instead, design balanced KPIs that reward lawful, professional behavior and client service C) It reduces costs D) It increases arrests
A) Legal/regulatory compliance check, local licensing requirements, market risk assessment, and staffing plan aligned with professional standards B) Copy existing contracts without change C) Announce expansion on social media D) Hire local guards immediately
A) Redesign shift rosters, hire additional staff, provide welfare and training, and monitor service quality metrics B) Ignore morale, focus on outputs C) Require overtime indefinitely D) Cut rest breaks to increase coverage
A) Use a single multiple-choice test B) Count attendance only C) Ask trainers if they liked it D) Pre/post competency testing, practical assessments, field audits, and follow-up performance metrics tied to SOPs
A) Hide the incident forever B) Refuse, explain legal obligations, report as required, and propose reputational management strategies that are lawful C) Partially redact and send a false summary D) Cooperate without question
A) Firing CEO immediately without investigation B) Only disciplining frontline staff C) Ignoring the breach D) Public acknowledgement of breach, corrective plan, assigned responsibilities, and transparent progress reports to stakeholders and regulators
A) Age alone B) Physical strength only C) Valid licensing/certification, background check clearance, competency in required skills, and evidence of integrity D) Willingness to work for low pay
A) Perform a risk assessment, quantify impact on safety/service, propose an optimized deployment that balances cost and risk mitigation B) Reduce patrols to save money C) Replace patrols with fewer cameras only D) Ignore the commander
A) Waiting for audit feedback B) Conducting internal compliance audit using the law’s checklist, fix issues, and prepare evidence of corrective actions C) Only updating documents on the audit day D) Hiding records likely to be queried
A) Create a competency-based career ladder with mandatory training milestones, certifications, and mentorships tied to promotions B) Promote only by seniority C) Promote relatives of managers D) No career path, only daily tasks
A) Terminate entire staff at once B) Immediately investigate, validate qualifications, discipline per policy, notify licensing board if needed, and remediate training gaps C) Replace documentation without action D) Ignore to keep numbers clean
A) A vague description of roles B) Clear roles/responsibilities, communication protocols, legal compliance steps, and training/testing schedules C) Only a list of emergency contacts without procedures D) Only evacuation routes
A) No contract needed B) Vendor qualification, standard operating procedures, data protection clauses, and periodic verification audits C) Full delegation without oversight D) Only verbal assurances from vendor
A) Arbitrary punishments to deter misconduct B) Clear, consistent disciplinary procedures with due process and appeals, proportionate sanctions, and rehabilitation options C) Punishments only for low-ranking personnel D) No discipline to avoid conflict
A) Percentage of staff current with licensing, passing rates on competency tests, and reduction in incident recurrence B) Number of social media posts about compliance C) Total number of guards hired this year D) Number of client complaints ignored
A) Cheaper vendor to save funds B) Choose randomly C) Use in-house unstructured training only D) Accredited vendor to ensure compliance and quality of professional competency
A) Never share any data B) Standardized incident reports with factual details, timelines, and corrective actions while protecting privacy and legal rights C) Share raw staff notes D) Only verbal summaries without records
A) Deploy selectively without oversight B) Ignore licensing and assume no consequences C) Halt deployment until legal compliance review, risk assessment, and policy updates are completed D) Deploy immediately to gain advantage
A) Use force to end argument B) Call supervisor only after incident C) Escort the customer off premises immediately without documentation D) Apply verbal de-escalation, preserve evidence, capture witness statements, and file an objective incident report for investigative follow-up
A) Fire the guard immediately without assessment B) Blame the complainant C) Analyze training records, situational transcripts, supervisor oversight, and cultural-competency gaps to redesign training modules D) Mark complaint as resolved without investigation
A) Memorize the steps of filing a report B) Watch a video about investigations C) Only practice radio communication D) Simulate a complex theft, require teams to collect evidence lawfully, interview witnesses, chain evidence, analyze motive, and prepare prosecutable documentation
A) Ignore unless theft occurs B) Confront aggressively and interrogate C) Secure the area, discreetly observe, collect non-intrusive intelligence, escalate to authorized investigators, and preserve chain of custody for any evidence D) Publicly accuse individuals
A) Cross-check access logs, interview guards and staff, analyze patterns, seek physical evidence, and map possible timelines to reconstruct events B) Accept client’s claim without verification C) Blame CCTV system D) Replace missing item immediately
A) Timed obstacle course B) A practical exercise presenting ambiguous threat levels where trainee articulates proportional response, legal justification, and post-incident reporting steps C) Multiple-choice Only D) True/false quiz
A) Refuse all VIP requests automatically B) Grant all VIP requests regardless of policy C) Evaluate request, seek management approval, document exceptions, and ensure legal and safety approvals are met before altering protocols D) Handle privately without documentation
A) Send a company-wide email accusing staff B) Accuse the suspected employee publicly C) Ignore the possibility D) Initiate discreet intelligence collection, limit disclosure to need-to-know, correlate access histories, and coordinate with HR and legal before a covert operation or disciplinary action
A) Provide clear, calm instructions, designate staff to assist vulnerable customers, communicate updates, and ensure post-evacuation accountability and client communications B) Evacuate only employees and leave customers C) Evacuate without informing customers of exits D) Lock doors and continue operations
A) Choose the statement that fits a manager’s preconception B) Discard all statements as unreliable C) Cross-validate statements with physical evidence, timelines, and CCTV; assess witness credibility and corroborate with independent sources D) Ignore contradictions and accept the first statement
A) Watching sample report videos B) Trainees must draft a full investigative report from a simulated incident, including chain-of-custody forms, legal considerations, and executive summary for stakeholders C) Reading sample reports D) Copying a template report
A) Never detain to avoid trouble B) Always detain suspects regardless of evidence C) Detain only if manager is present D) Evaluate probable cause, safety, legal authority, risk to the public, and document justification for detention consistent with law and organizational policy
A) Share raw intelligence files externally B) Withhold all incident information C) Market and publicize internal investigations widely D) Implement a confidential incident feedback loop, transparent service-level reporting, and regular stakeholder briefings while protecting sensitive intelligence
A) Ignore documenting the chase B) Post chase details on social media C) Immediately secure scene, interview witnesses, note pursuit details (times, directions), coordinate with police, and ensure bodycam/CCTV capture preserved D) Continue searching without reporting
A) Number of guard selfies with clients B) Number of calls to security center C) Number of compliments only D) Response time, resolution effectiveness, lawful conduct incidents, follow-up documentation quality, and client satisfaction surveys analyzed for training gaps
A) Integrate physical forensics, digital forensics, personnel access records, vendor contract review, and external threat intelligence to determine motive and actors B) Fire a random employee to deter sabotage C) Blame external competitors without proof D) Focus only on physical security
A) Ignore since performance is otherwise good B) Facilitate scenario-based bias-awareness training, role-play customer-relations simulations, and evaluate behavior changes through supervision and feedback C) Give a written warning only D) Immediately terminate the trainee
A) Bullet list of rumors B) Executive summary, threat assessment with evidence, impact analysis, recommended mitigations, and prioritized action plan with resource estimates C) Long narrative without conclusions D) Use raw messages with no analysis
A) Post images from the phone on social media B) Let anyone access phone to look for info C) Hand phone to client for safekeeping D) Isolate device (airplane mode), document chain-of-custody, avoid powering on/off unnecessarily, and coordinate with digital forensics specialists for imaging
A) Ignore clients to avoid panic B) Provide a generic press release only C) Blame clients for causing incident D) Provide transparent incident report, outline corrective actions, offer remediation where appropriate, and solicit client feedback for continuous improvement
A) Ignore since thefts are petty B) Remove vendor without cause C) Review vendor access logs, reconcile deliveries, interview staff, and recommend vendor audits and strengthened access controls D) Confront vendor employees immediately
A) Asking trainees if they feel confident B) Quiz on definitions C) Observing attendance only D) Practical casework assessment requiring chain-of-custody, witness interview, analytical timeline, and prosecutable report reviewed by external expert
A) Ignore the keycard since it’s not a weapon B) Destroy the keycard to prevent misuse C) Assess card ownership via access logs, interview the person, secure evidence, and detain only if probable cause exists and legal authority is clear D) Immediately arrest the person without cause
A) Replace training with memos B) Prioritize scenario-based, high-impact modules (e.g., evidence handling, interview skills), cross-train supervisors, and use blended learning to save costs C) Cancel all investigative training D) Outsource all training abroad
A) Copy the senior staff’s behavior B) Discreetly document the breach, report via appropriate channels, and follow up with a compliance investigation regardless of rank C) Confront publicly and humiliate the staff member D) Ignore due to seniority
A) One-line email saying “everything’s fine” B) A single site’s incident report only C) Comparative incident trend analysis with heat maps, root-cause insights, and prioritized remediation recommendations across sites D) Raw incident logs with no analysis
A) Leaving the area immediately B) Hiding from the drill C) Developing a controlled, multi-step response integrating de-escalation, team coordination, evidence preservation, and post-incident documentation plan D) Shouting to scare suspect away
A) Offer witnesses money to change statements B) Encourage leading questions to speed up results C) Use structured interview protocols, record sessions (where legal), document non-leading questioning, and protect witness confidentiality to maintain credibility D) Allow informal interviews with no record
A) Prioritize by risk (likelihood × impact), feasibility, legal constraints, and potential to prevent harm, then assign resources accordingly B) Act on the first tip received C) Randomly choose tasks D) Only pursue tasks that are easy
A) Omit inconvenient facts B) Include hearsay as fact C) Write emotional descriptions to sway court D) Produce objective, chronological facts, corroborate with evidence, avoid opinion, and include evidence logs and witness details for legal scrutiny
A) Replace lock hardware only B) Immediately hire more guards C) Hand the problem to the client D) Conduct a site survey mapping vulnerabilities, crime patterns, access points, lighting, CCTV blind spots, and then match controls to quantified risk priorities
A) Flip a coin B) Pick both regardless of budget C) Perform cost-benefit analysis, consider residual risk, deterrence effects, and long-term total cost of ownership before selecting a layered solution D) Choose the cheaper option
A) Wait for an incident to act B) Ignore the oversight C) Fire all unvetted personnel immediately D) Implement urgent background checks for critical roles, temporary restrictions on sensitive access, and a schedule to complete checks for all relevant staff
A) Store all records outside the facility only B) Introduce classification levels, need-to-know access, logging of sensitive document handling, and secure disposal procedures balanced with business needs C) Ban all internal copying D) Allow anyone access if they request it
A) Payroll processing B) The coffee vending machine C) Evacuation communications, emergency medical response coordination, and secured access to critical safety systems D) Marketing campaign systems
A) Pilot implementation with metrics: incident rates pre/post, penetration test results, and quantitative risk reduction modeling B) Testimonials without data C) Verbal assurance only D) Photo of new equipment only
A) Ignore both risk and appearance B) Build the thickest, most aggressive fence possible regardless of impact C) Opt for an ornamental fence for appearance only D) Recommend a layered approach: discreet intrusion detection, natural surveillance improvements (lighting/landscaping), and targeted fencing where risk justifies it
A) Implement access controls, encryption, audit logging, role-based permissions, and a documented retention/destruction policy before digitization B) Save on local desktops only C) Post files on a public drive for convenience D) Only password-protect with a generic password
A) Activate contingency suppliers, prioritize critical processes for recovery, implement manual fallback procedures, and communicate with stakeholders per the BCP B) Blame the supplier publicly C) Hope the supplier resumes quickly D) Close operations until supplier returns
A) Allow tailgating during busy hours B) Increase gate height alone C) Replace guards with a single camera only D) Combine physical barriers, access credential upgrades, anti-tailgate technology, staff training, and monitoring with enforcement policies and sanctions
A) Map the leak pathway (who had access), review controls, interview staff, assess extent of compromise, and implement technical/administrative remediations and monitoring B) Fire a random staff member C) Delete the breached files to hide the issue D) Ignore if not publicized
A) Wait until something happens before deciding B) Ignore such threats entirely C) Accept where cost of mitigation exceeds impact, but monitor and periodically reassess; implement low-cost controls where feasible D) Spend maximum budget to eliminate them entirely
A) Implement least-privilege access, session monitoring, privileged access management, and documented emergency override procedures with audit trails B) Use a single master password for ease C) Remove all admin privileges from everyone permanently D) Give administrators full access with no oversight
A) Rely on insurance to cover problems B) Outsource risk to contractors C) Conduct a targeted risk assessment, integrate controls into process design, update BCP and recovery priorities, and train staff before commissioning D) Start production immediately and adapt later
A) Cover only entrances and ignore interior zones B) Place them only where cosmetically appropriate C) Place cameras randomly to cover all walls D) Use threat scenarios, sightlines, lighting conditions, image retention needs, privacy impacts, and integration with response procedures to optimize placement
A) Blame the IT department without analysis B) Delete the document and hope for the best C) Ignore unless someone complains D) Contain exposure, assess scope, notify affected parties per policy, apply legal/PR strategies, and strengthen access controls to prevent recurrence
A) Lock doors only B) Access control, visitor vetting, CCTV, data segmentation, endpoint protection, and strict document handling policies with staff vetting and monitoring C) Allow open access to foster collaboration D) Only increase signage about confidentiality
A) Cancel future drills to avoid failures B) Conduct root-cause analysis, test redundancy, evaluate manual workarounds, update recovery time objectives (RTOs), and schedule corrective maintenance and alternate backup sources C) Dismiss the failure as a fluke D) Replace the generator with the same model without analysis
A) Only plan for everyday minor events B) Use risk-based prioritization focusing on high-impact events first, adopt proportional controls, and incorporate scalable contingency options C) Treat all events equally D) Only buy the most expensive mitigation available
A) Hire quickly without vetting to fill vacancies B) Hire friends of management only C) Only check identity documents D) Require multi-source reference checks, financial background screenings, integrity testing, and role-specific monitoring with separation of duties
A) No change is needed; cloud providers are always reliable B) Single-point-of-failure in vendor dependency; recommend multi-region/backups, contractual SLAs, and test restores to ensure recovery capability C) Rely on on-premises tapes only without testing D) Cancel backups altogether
A) Keep the corridor unlocked for convenience B) Block the corridor to prevent unauthorized access C) Use alarmed, access-controlled doors that comply with egress codes (fail-safe mechanisms), combined with monitoring and clear signage to preserve life-safety while securing areas D) Use bolt locks that require keys and prevent escape
A) Implement enterprise-wide classification policy, training, and enforcement with tools for labeling and automated controls tied to BCP priorities B) Outsource classification to an external vendor with no integration C) Let each department do as they wish D) Delete old classifications
A) Discard all low-priority risks entirely B) Treat low-priority items first C) Spend budget evenly across all items D) Group similar risks, assess aggregated impact, reprioritize by combined likelihood and impact, and address clusters with single controls where effective
A) Add access control, monitoring, staff awareness, and integrate the utility entrance into patrol and CCTV coverage with procedural checks B) Remove all utility entrances and relocate utilities C) Ignore since utilities are low profile D) Close the entrance permanently
A) Move all production to the unstable region B) Rely on the supplier’s assurances only C) Do nothing and hope supplier remains stable D) Develop alternate suppliers, maintain safety stock for critical items, and create contractual contingencies and rapid switch-over procedures
A) Offer anecdotal stories only B) Present quantified risk reduction, ROI estimate, incident-avoidance costs vs. implementation cost, and regulatory/compliance benefits for decision-making C) Says it looks more professional D) Claim it is mandatory without evidence
A) Only read the BCP document annually B) Regular drills of full-scale recovery, desktop scenario testing, supplier continuity tests, and evidence-based post-exercise improvements with timelines C) A tabletop exercise only every five years D) Outsource testing and ignore results
A) Remove Wi-Fi entirely B) Implement segmented guest networks isolated from corporate resources, enforce bandwidth/security policies, and present clear acceptable-use terms C) Display passwords publicly in the lobby D) Use the corporate network for guests
A) Reduce employee hours to save costs and hope for the best B) Only purchase extra servers without testing C) Assume systems will be back in time by luck D) Map critical processes, identify dependencies, establish recovery strategies (hot/warm sites), test restores, and align resource allocations to meet the RTO
A) Reconfigure sightlines with low landscaping, optimize lighting, create natural surveillance, control access, and combine signage and territorial reinforcement to reduce crime opportunities B) Install only high fences with barbed wire C) Add metal detectors only D) Add more security guards only
A) A hybrid approach that uses CPTED for long-term social prevention and targeted mechanical systems for high-risk nodes yields better resilience and community acceptance B) Use only police patrols and nothing else C) Mechanistic security always wins D) CPTED is obsolete
A) Introduce transparency (glass), natural surveillance points, mirrored sightlines, and controlled access while maintaining aesthetic coherence B) Close the corridors permanently C) Keep blind corridors and increase patrols only D) Add murals to decorate blind spots only
A) Design inclusive public spaces with active uses (cafés, vendor stalls), adequate lighting, seating that discourages long-term loitering in sensitive areas, and community policing initiatives B) Close the space at night permanently C) Remove seating entirely to prevent anyone from staying D) Enforce blanket anti-loitering laws harshly
A) Hide guards in basements only B) Add visible armed sentries on every corner of the roof C) Cover the façade with solid metal plates D) Use architectural features (bollards disguised as planters, setback landscaping, and reinforced glazing) that provide protection without visible fortress aesthetics
A) Install random spikes that damage tires to stop parking B) Only hand out pamphlets about theft prevention C) Ban parking entirely D) Reorganize parking into well-lit, surveilled zones, increase natural surveillance through foot traffic patterns, add controlled access points, and run community awareness campaigns
A) Distributed nodes with clear sightlines, controlled access points, and secure back-of-house circulation to reduce single-point-target risk and support emergency egress B) One concentrated atrium for maximum density C) Randomly place shops with no planning D) Hide all shops behind secured doors only accessible by staff
A) Community engagement slows down planning B) Engaged communities increase social cohesion, informal guardianship, and long-term deterrence, reducing reliance on costly mechanical controls and improving legitimacy of security measures C) Community input always increases crime D) Only technology can prevent crime, community engagement is irrelevant
A) Ignore security to preserve authenticity B) Build a separate modern structure next to the heritage site and move everything there C) Replace the heritage site with a modern fortress D) Use reversible, non-invasive security installations (discreet cameras, mobile access solutions, sympathetic barriers) and collaborate with conservationists to maintain historical integrity while improving protection
A) Install visible concrete blocks everywhere B) Use temporary measures only during festivals C) Use graduated measures (landscaped barriers, retractable bollards, widened sidewalks, setback café zones) combined with pedestrian experience analysis and emergency access planning to balance protection and livability D) Close the promenade to the public permanently |