Terrorism Awareness and Critical Infrastructure Protection
What this domain tests
Terrorism awareness and critical infrastructure protection: the exam tests recognition of pre-incident indicators, reporting, and non-confrontation at sensitive sites.
Core rules
- Pre-incident indicators: unusual surveillance, photography of security features, repeated probing questions, unattended packages, abandoned vehicles, tampering with utilities or cameras, strong chemical odors, smoke, or unusual purchases. A single indicator is not proof; pattern and context matter.
- Critical infrastructure sectors include energy, water, transportation, communications, financial services, healthcare, emergency services, food and agriculture, and government facilities. Guards at these sites protect access, observe, report, and preserve evidence-not investigate terrorism.
- Report through the chain of command and law enforcement; use “See Something, Say Something” principles. Do not confront or open suspicious items; establish a perimeter, avoid radios near suspected devices, and follow bomb-threat procedures.
- Protect need-to-know information; do not post site details or security measures online.
Worked example
A person repeatedly photographs the camera positions and gate schedule at a water facility. Reasoning: note description, vehicle, plate, time, and direction; do not approach or accuse; report to the supervisor and police; review access logs and preserve video. The observation is a possible indicator, not a crime in itself, so the response is documentation and referral.
Traps
- Confronting a possible surveillance operative.
- Opening or moving a suspicious package.
- Treating one odd event as certain terrorism.
- Sharing security details on social media.