EMI PSA cheat sheet

Risk = likelihood × consequence; a hazard with high likelihood and severe consequence ranks above one with only one severe factor.

Hierarchy of controls, most to least effective: elimination, substitution, engineering controls, administrative controls, PPE.

PPE is the last line of defense; it protects only the wearer and only while correctly fitted and maintained.

A near miss is an unplanned event with no injury or damage; it signals a failing barrier and is reportable under most safety programs.

Residual risk is the risk remaining after controls are applied; acceptance of residual risk must be documented and authorized.

Dynamic risk assessment: continuously re-evaluate threat, exposure, and escape routes as conditions change.

Occupational exposure limits are time-weighted averages; short-term exposure limits apply to peaks of 15 minutes in most jurisdictions.

Lone workers carry elevated risk because detection and rescue are delayed; check-in intervals should be set by task risk level.

Baseline-plus-anomaly method: establish what is normal for a location, then treat deviations as cues for closer scrutiny.

Pre-attack indicators include unusual interest in security features, repeated reconnaissance, and attempts to bypass screening.

Threat assessment weighs capability, intent, and opportunity; any single element alone is weak evidence.

Distance, cover, and concealment govern exposure; cover stops projectiles, concealment only blocks observation.

Color-coded awareness: condition white (unaware), yellow (relaxed alert), orange (specific concern), red (action).

Behavioral indicators must be read in clusters; a single cue such as sweating has many innocent explanations.

Time-distance reaction: an approaching person at normal walking pace closes roughly 1.4 meters per second.

Escalation signs in a confrontation include fixed stare, clenched fists, and invasion of personal space; these precede most assaults.

Access control principle: verify identity, then authorize, then record; skipping verification voids the audit trail.

Need-to-know and least-privilege: grant the minimum access required for the role and review entitlements on a set cycle.

Tailgating and piggybacking are defeated by one-person-per-authentication rules and vestibule interlocking.

Three authentication factors: something you know, something you have, something you are; two distinct factors equal multifactor.

Visitor management requires sign-in, badge display, escort rules, and sign-out reconciliation at end of shift.

Key control: log issue and return, prohibit unmarked duplicates, and rekey on loss or separation of a holder.

Anti-passback prevents one credential being used by two people or reused without an exit event in the same zone.

Perimeter layers should fail closed for assets and fail safe for life safety egress; egress doors must open freely from inside.

A report answers who, what, when, where, how, and what was done; opinions and conclusions belong in analysis, not observation.

Objective language rule: record observable facts and direct quotes, not characterizations such as 'aggressive' without describing the act.

Chronological entries with time stamps create the defensible timeline; note the source of each time (CCTV, radio log, witness).

Preserve evidence chain of custody: who collected, when, where stored, and every transfer with signatures.

Reports are discoverable; write as if the subject, a court, and a regulator will read the file.

Correct errors with a dated, initialed addendum; never alter or overwrite an original entry.

Notification thresholds: serious injury, weapon involvement, or regulatory breach usually trigger immediate escalation.

CCTV retention periods are set by policy and law; export and hash critical footage before automatic overwrite.

RACE sequence: Remove those in danger, Alarm, Contain the hazard, Evacuate or shelter.

PASS for extinguishers: Pull pin, Aim at base of fire, Squeeze handle, Sweep side to side.

Evacuation vs shelter-in-place is decided by hazard type; smoke and fire favor evacuation, airborne or outdoor threats may favor shelter.

Assembly point must be at a safe distance, upwind, and clear of fire apparatus access; conduct headcount against a roster.

Stairwells are the primary egress in high-rise evacuation; elevators are not used unless designed for fire service.

Evacuation time depends on travel distance, exit width, and occupant load; blocked exits reduce capacity proportionally.

Sweep and secure: teams check accessible rooms, close fire doors, and report all-clear or missing persons to the incident commander.

Drills must be documented with date, participants, scenario, time to clear, and corrective actions for observed deficiencies.

De-escalation sequence: ensure safety, establish distance and exit, calm verbal tone, listen, then offer limited choices.

Verbal de-escalation lowers arousal; shouting, crowding, and rapid movement raise it and increase assault risk.

Active listening components: paraphrase, reflect feeling, ask open questions, summarize, and confirm understanding.

Position for safety: bladed stance, hands visible, at least two arm-lengths away, never between the subject and the only exit.

Limit setting uses a clear statement of the behavior, the impact, and the consequence, delivered once and calmly.

The fight-or-flight response reduces auditory processing; keep instructions short, concrete, and repeated.

Physical intervention is a last resort, proportional to threat, and requires the legal justification of defense of self or others.

Post-incident communication includes a factual briefing to responders and a written record of statements made.

Defense in depth layers: perimeter, building envelope, interior zones, and asset enclosures; each layer delays and detects.

Detection, delay, and response are the three functions of a physical protection system; response time must be shorter than delay time.

Alarm systems produce false alarms; verification by video or second sensor reduces wasted response.

Access control card technologies: proximity (125 kHz) is clonable; smart cards with mutual authentication are stronger.

CCTV coverage is judged by pixel density on target; identification typically requires far higher resolution than detection.

Intrusion sensors: passive infrared detects heat change, dual-technology requires both PIR and microwave to trip, reducing nuisance alarms.

System availability depends on power: UPS bridges short outages, generators cover extended ones; test under load on schedule.

Integration risk: networked physical security devices need firmware patching, segmentation, and unique credentials like any IT asset.

Slip, trip, and fall controls: housekeeping, adequate lighting, edge protection, and prompt spill response.

Manual handling rule: keep the load close, bend knees, avoid twisting; team lifts for loads beyond individual capacity.

Electrical safety: de-energize and lock out before work; treat unknown conductors as live until tested.

Hazard communication requires labels, safety data sheets, and training for every hazardous chemical on site.

Noise exposure is cumulative; hearing protection is required above the action level, and audiometric testing tracks damage.

Ergonomics: neutral posture, adjustable workstations, and micro-breaks reduce cumulative musculoskeletal injury.

Incident causation models (Swiss cheese, Heinrich pyramid) show that multiple failed barriers precede most serious injuries.

Emergency eyewash and shower stations must be reachable within 10 seconds of a corrosive chemical exposure point.

Use of force must be necessary, proportional, and no more than reasonably required to prevent harm.

Citizen's arrest and detention authority varies by jurisdiction; private security usually holds only the powers of a private citizen.

Duty of care: an occupier owes lawful visitors reasonable care for their safety, including warning of known hazards.

Confidentiality: personal data collected for security is used only for the stated purpose and retained no longer than necessary.

Evidence handling must preserve admissibility; contamination or gaps in custody can render material excluded.

Discrimination law prohibits profiling or selective enforcement based on protected characteristics rather than behavior.

Ethical standards require honest reporting, avoidance of conflicts of interest, and refusal of unlawful orders.

Records requests and legal holds: preserve all relevant material once litigation or investigation is reasonably anticipated.