CSO (CDR) study plan

Map the patrol cycle (pre-shift briefing, post assignment, observation, reporting, handover) and list the required elements of an incident report from memory

Draft three narrative incident reports from written fact patterns that include who/what/when/where/how, actions taken, and disposition

Distinguish observation from inference by rewriting five biased or conclusion-laden statements into objective descriptions

State the core duties, limits of authority, and reporting obligations of a security officer in your jurisdiction

Apply a professional-ethics decision checklist to four short scenarios involving gifts, use of employer property, and conflicts of interest

Sequence the steps of visitor and contractor access control from arrival to escort to departure, and identify the checkpoint where each credential is verified

Classify six given identification documents by type and list the physical and logical security features used to validate each

Explain the legal concepts of arrest, detention, search, and citizen's powers in plain language, citing where officer authority ends

Rank a set of force options on a continuum and justify escalation and de-escalation choices in three written scenarios

Identify the liability exposures (false imprisonment, negligence, excessive force, defamation) present in five short fact patterns

Build a response checklist for fire, medical, bomb threat, and severe-weather events covering notification, evacuation or shelter, scene control, and handoff to responders

Write the first five minutes of an emergency response in sequence for two scenarios, naming the specific actions and the order they occur in

Demonstrate the radio protocol: use plain language, phonetic alphabet, and a structured message format to compose eight practice transmissions

Convert five angry or confused customer statements into de-escalating verbal responses and explain the technique used in each

Identify the reporting chain and notification triggers for an emergency, including when to call 911 versus internal contacts

Describe the purpose and normal operating state of access control, intrusion detection, video surveillance, and alarm systems, and match each to two facility risks

Trace the alarm signal path from sensor to monitoring center to responder and state the officer's action at each step

Diagnose five CCTV or access-control coverage problems (blind spots, retention gaps, tailgating) and propose one corrective measure for each

Identify the four elements of a fire tetrahedron, the classes of fire, and the correct extinguisher for each class

Execute a life-safety walkthrough checklist covering exits, signage, sprinkler and extinguisher status, and evacuation routes

List pre-incident indicators and risk factors of workplace violence and map them to the appropriate reporting and escalation step

Draft a threat-assessment escalation path from first observation to HR, security leadership, and law enforcement involvement

Identify common workplace hazards (slips and trips, PPE, electrical, chemical, ergonomic) and state the control measure for each

Explain the reporting and documentation duties that follow a workplace injury or near miss

State personal protective measures an officer takes before intervening in a violent or hazardous situation

Re-test the two heaviest domains under timed conditions and score at least 80 percent on each

Re-write any incident report questions missed and identify the specific element that was omitted

Recite the ethics code commitments and authority limits without notes

Convert each missed question into a one-line rule card for spaced review

Re-test the second-tier domains under timed conditions and score at least 80 percent on each

Rehearse the access-control and emergency checklists aloud until delivered without prompts

Resolve ten mixed-domain scenario questions that combine legal authority with emergency or access-control decisions

Update the error log and retire any rule cards answered correctly three times in a row

Re-test the remaining four domains and score at least 75 percent on each, then re-drill only the misses

Complete two full-length timed simulations at or above the passing threshold with no domain below 70 percent

Perform a final review of all rule cards flagged as high-risk in weeks 6 and 7

Confirm exam-day logistics: identification, location or platform, timing, and permitted materials