UPMSP High School Security common mistakes
UPMSP High School Security · Understand the traps and how to avoid them.
When asked to distinguish prevention, detection, and response, the candidate labels every control as 'prevention' - for example calling a CCTV camera a preventive measure or describing a fire alarm as a deterrent.
Candidates memorise a list of security gadgets without mapping each to the function it performs, and everyday language ('security means stopping bad things') reinforces the confusion. Under time pressure they default to the word they heard most in training.
What to do instead
Build a three-column table (Prevent / Detect / Respond) and place every control you can name into it: locks, lighting, and signage under Prevent; CCTV, motion sensors, and alarms under Detect; guards, fire extinguishers, and evacuation under Respond. Note that many items appear twice (a guard patrols, detects, and responds) and practise stating which function is being asked about.
The candidate treats 'access control' as synonymous with 'a locked door', so when asked about tailgating, piggybacking, or visitor management they answer only that the door should be locked and miss the procedural layer entirely.
Physical hardware is visible and memorable, whereas the human and procedural controls (escort rules, badge checks, mantraps, sign-in logs) are abstract and get skipped during revision. Candidates also confuse tailgating (following an authorised person through without their knowledge) with piggybacking (entering with the authorised person's consent).
What to do instead
Learn access control as three layers - physical (doors, turnstiles, mantraps), electronic (card readers, biometrics, PINs), and procedural (visitor logs, escorts, challenge culture). For each layer write one countermeasure to tailgating and one to piggybacking, and be able to define both terms in a single sentence.
In questions about reporting, the candidate writes what they think happened or what they concluded ('the visitor was suspicious and probably a thief') instead of recording observable facts, times, locations, and the exact words used.
Everyday storytelling rewards interpretation, and candidates carry that habit into reports. They also fear a bare factual account looks unhelpful, so they add opinions to seem thorough - which is exactly what makes a report unusable in an inquiry.
What to do instead
Practise the 'camera test': write only what a camera would have recorded - who, what, where, when, in what sequence, and what was said verbatim. Move all inferences into a separate line beginning 'Opinion:' or omit them. Rehearse the standard skeleton: date/time, location, persons involved, factual narrative in chronological order, action taken, signature and designation.
The candidate answers a fire question by saying 'use the nearest extinguisher' without identifying the class of fire or the correct extinguisher, and may propose water on an electrical or flammable-liquid fire.
Extinguisher selection is taught as a list of colours and labels that candidates memorise without the underlying logic (removing heat, fuel, or oxygen). Under exam pressure they reach for the most familiar agent, water, regardless of the fuel.
What to do instead
Learn the fire classes with one example each (A solid combustibles, B flammable liquids, C gases, D metals, and electrical equipment treated separately) and pair each with the correct agent: water for A, foam or CO2 for B, dry powder or CO2 for electrical. Memorise the PASS sequence (Pull, Aim, Squeeze, Sweep) and the rule that life safety precedes property protection.
When a scenario describes an unresponsive casualty, the candidate jumps straight to CPR and omits the primary steps - checking the scene for danger, checking responsiveness, and calling for help or an ambulance.
CPR compressions are the most rehearsed and most dramatic part of first aid, so they dominate recall. Candidates also assume the examiner wants the 'big' intervention rather than the sequence.
What to do instead
Drill the fixed order until it is automatic: Danger, Response, Shout for help, Airway, Breathing, CPR (and defibrillator if available). In every scenario answer, write the steps in order and explicitly state 'scene safety checked' and 'emergency services called' before describing compressions, so the sequence is visible to the marker.
The candidate describes a hazard as an accident, or a risk as a hazard - for example writing 'the risk was a wet floor' or 'the hazard was that someone might fall'.
The three terms sound interchangeable in ordinary speech, and candidates learn definitions as isolated sentences rather than as a chain (hazard → risk → incident). Without a worked example the distinction collapses in the exam hall.
What to do instead
Memorise one anchor example and reuse it: the wet floor is the hazard; the likelihood and severity of someone slipping is the risk; the fall is the incident; mopping and signage is the control. Then apply that chain to two other examples (an unguarded machine, a trailing cable) so the pattern, not the phrase, is what you recall.
In communication scenarios the candidate recommends 'explain the rules firmly' or 'tell them to leave', rather than describing an approach that acknowledges the person's concern before stating the requirement - and ignores non-verbal cues and active listening entirely.
Security training often emphasises authority and compliance, so candidates equate good performance with assertiveness. Written exams reward a structured, empathetic sequence, which feels slower and less 'security-like' to a candidate.
What to do instead
Use a fixed four-step script for confrontation questions: listen and acknowledge, explain the reason for the rule, state the required action clearly, offer the available option (supervisor, alternative entrance, complaint route). Practise writing it in the first person, and mention tone, distance, and open posture explicitly, since markers award those points.
The candidate answers a search, detention, or use-of-force scenario by authorising whatever seems effective - 'the guard can search the bag', 'staff can hold the person until police arrive' - without reference to consent, legal authority, or proportionality.
Candidates reason from operational effectiveness rather than legal power, and many assume a security officer has the same authority as a police officer. They also conflate the right to use reasonable force in self-defence with a general power to detain or search.
What to do instead
For every legal scenario, ask three questions before answering: what is my legal authority here, did the person consent, and is my action proportionate and necessary? Learn the baseline that a private security officer generally has no police powers, that a search normally requires consent or a contractual or statutory basis, and that any force must be reasonable, necessary, and only to prevent harm or effect a lawful citizen's arrest. State the legal basis explicitly in your answer.
The candidate describes a CCTV system or alarm as 'installed and working' without addressing coverage, recording retention, image quality, monitoring, or the response to an activation - and treats an alarm as self-sufficient.
Equipment questions are revised as a list of device names, so candidates can name a camera but not explain what makes a system effective. The human and procedural half of the system (who watches, who responds, how long footage is kept) is invisible and gets omitted.
What to do instead
For each device, learn three things: what it does, its limitation, and what makes it effective. For CCTV: coverage of entrances and assets, adequate lighting and resolution, retention period, access to footage, and privacy rules. For alarms: detection type, zone identification, response procedure, and false-alarm management. Always pair the technology with the human response in your answer.
On drill and record-keeping questions the candidate gives a vague answer ('conduct regular drills and keep records') without naming frequency, participants, debrief, or the specific records that must be kept and for how long.
These topics feel administrative and low-risk, so candidates skim them and rely on generic phrases. They also do not realise that examiners award marks for the concrete components - attendance, timings, debrief findings, corrective actions, and retention.
What to do instead
Learn a drill as a cycle: plan and notify, brief participants, run and time the evacuation, roll-call and account for all persons, debrief and record findings, assign corrective actions, and review. For records, be able to list the core documents (incident log, occurrence book, visitor register, key register, drill report, maintenance and fire-equipment checks) and state that entries are contemporaneous, signed, and retained per policy and legal requirements.