UPMSP Vocational Security cheat sheet

Three pillars of information security: confidentiality (only authorised access), integrity (data unaltered and accurate), availability (accessible when needed) - remembered as CIA triad.

Defence in depth layers controls: deterrence, detection, delay, response; a single layer failure should not compromise the asset.

Risk = likelihood × impact; residual risk is what remains after controls, and it must be formally accepted by an accountable authority.

Threat is a potential cause of harm; vulnerability is a weakness; risk is the combination of threat exploiting vulnerability with consequence.

Physical security rings: perimeter, building envelope, interior zones, restricted rooms, asset containers - access difficulty increases toward the asset.

Security vs safety: security addresses intentional human adversaries; safety addresses accidents and natural hazards; both share prevention and response planning.

Least privilege and need-to-know govern access decisions; authorisation must be verified, not assumed from uniform or familiarity.

Deterrence works only when detection and response are credible; visible measures without response capability shift risk rather than remove it.

Core duties: protect life first, then property, then maintain order; life safety always outranks asset protection in a conflict.

Observe–report–record: the guard reports facts to the control room or supervisor; investigation and arrest decisions belong to police or management.

Use of force must be lawful, necessary, proportionate and minimal; deadly force is never justified solely to protect property.

A guard's authority derives from the property owner's consent (trespass law) plus citizen powers, not from police powers.

Accepting gifts, bribes or favours from contractors, drivers or visitors creates a conflict of interest and must be refused and reported.

Confidentiality: post orders, patrol patterns, key codes, CCTV layouts and personal data of visitors are not disclosed to outsiders.

Punctuality and handover discipline: relief must be briefed on incidents, keys, equipment faults and pending tasks before the outgoing guard leaves.

Uniform, ID card and grooming standards support authority and identification; an unidentified person claiming to be staff is escorted and verified.

Access control process: identification → authentication → authorisation → accountability (logging entry and exit).

Something you know (PIN), have (card, key), are (biometrics) - combining two different categories gives multi-factor authentication.

Tailgating (following closely) and piggybacking (with consent) are defeated by turnstiles, mantraps, one-person rules and staff challenge.

Anti-passback prevents a card being passed back to another person; it requires entry and exit readers linked to the same system.

Key control: register issue and return, serial-number keys, master-key hierarchy, and rekey locks when a key is lost.

Perimeter controls: fencing, bollards, lighting, clear zones and intrusion sensors; CPTED uses natural surveillance and sightlines to reduce crime opportunity.

Visitor management records name, ID, host, purpose, time in/out and badge colour; badges must be visibly worn and surrendered on exit.

Lock types: mortise and rim locks, padlocks, deadbolts, electromagnetic locks (fail-safe on power loss) versus fail-secure for high-value assets.

Fire tetrahedron: fuel, oxygen, heat, chain reaction - removal of any one element extinguishes fire.

Fire classes: A solid combustibles, B flammable liquids, C gases, D metals, E electrical (in Indian/UK usage), F/K cooking oils; water is unsafe on B, E and F.

PASS technique for extinguishers: Pull the pin, Aim at the base, Squeeze the handle, Sweep side to side.

Stages of fire: incipient, growth, fully developed, decay; flashover marks transition to a fully developed compartment fire.

Evacuation priorities: alarm, call fire service, evacuate occupants, assemble and head-count at the muster point, then report.

Smoke kills more people than flames; stay low, use stairs not lifts, and never re-enter a burning building.

Detection and suppression aids: smoke and heat detectors, manual call points, sprinklers, hose reels, hydrants, and fire doors that must never be wedged open.

Emergency response sequence: raise alarm, inform control room, attempt safe containment only if trained, guide evacuation, secure the scene for the fire service.

BLS sequence for adults: ensure scene safety, check responsiveness, shout for help, call emergency services, open airway, check breathing, start chest compressions.

Compression rate 100–120 per minute, depth 5–6 cm in adults, full recoil, ratio 30 compressions to 2 breaths; use an AED as soon as available.

Recovery position for an unconscious but breathing casualty prevents airway obstruction by the tongue or vomit.

Severe bleeding: apply direct pressure with a clean dressing, elevate if possible, and use a tourniquet only when direct pressure fails.

Choking adult: encourage coughing; if ineffective, give up to 5 back blows then up to 5 abdominal thrusts, alternating.

Burns: cool with running water for at least 20 minutes, remove jewellery, do not burst blisters, do not apply ice, oil or toothpaste.

Fractures and spinal injury: immobilise, do not attempt realignment, and avoid moving a casualty unless there is immediate danger.

DRABC: Danger, Response, Airway, Breathing, Circulation - the primary survey before any secondary assessment.

Hierarchy of controls: elimination, substitution, engineering controls, administrative controls, PPE - PPE is the last line of defence.

Lockout/tagout (LOTO) isolates energy before maintenance; the person working on equipment holds the key and personal tag.

Permit-to-work systems cover hot work, confined space entry, working at height and excavation; a permit is time-bound and site-specific.

Confined space hazards: oxygen deficiency or enrichment, toxic gas, flammable atmosphere; entry requires testing, ventilation, attendant and rescue plan.

Machine guarding prevents contact with moving parts; guards must not be removed without authorised isolation.

Electrical safety: earth/ground, RCD/ELCB protection, no wet hands, isolate before work, and treat all conductors as live until proven dead.

Housekeeping and 5S reduce slips, trips and fire load; materials stacked at safe height and aisles kept clear.

Hazardous material marking follows labels and Safety Data Sheets; storage segregates incompatible chemicals and flammables in approved cabinets.

Hazard types: physical, chemical, biological, ergonomic, psychosocial, and mechanical - each needs a different control strategy.

Noise: risk rises with level and exposure time; 85 dB(A) over 8 hours is a common action level requiring hearing protection.

Heat stress: watch for cramps, exhaustion and heat stroke (hot dry skin, confusion); cool, hydrate and seek urgent help for heat stroke.

Ergonomics: correct lifting keeps the load close, back straight, knees bent, no twisting; team lift heavy or awkward loads.

PPE selection by hazard: helmet for head, goggles/face shield for eyes, ear plugs/muffs for noise, respirator for dust and fumes, gloves and safety shoes.

Indoor air quality and ventilation dilute dust, fumes and vapours; local exhaust ventilation captures contaminant at source.

Occupational health records and periodic medical checks detect early hearing loss, respiratory and skin problems.

Report every near miss: it is a free lesson that reveals a hazard before it causes injury.

Crowd density benchmarks: below about 2 persons/m² movement is free; around 4–5 persons/m² crowd turbulence and crushing risk appear.

Crowd behaviour is driven by information: uncertainty and blocked exits convert a crowd into a panic; clear instructions and visible exits reduce risk.

Design principles: adequate exit width, one-way flow, no bottlenecks, no dead ends, and removal of trip hazards from circulation routes.

Crush response: stop pushing, keep arms in front of chest to protect the ribcage, move with the flow diagonally toward the edge.

Monitor crowd at entry gates, choke points and standing areas; count in versus count out to detect over-capacity.

Lost child or medical emergency inside a crowd: create a protected space, alert control room, guide medical team by clear route.

Communication tools: PA announcements, stewards with megaphones, signage and lighting; consistent messages from one authority.

Surge triggers include late gate opening, cancelled transport, weather, and a single high-demand exit - pre-plan gates and stagger release.

Event security planning stages: risk assessment, site survey, zoning (public, ticketed, restricted, backstage), staffing plan, briefing, debrief.

Screening at entry: bag search, metal detection, ticket and ID verification; prohibited items list published in advance.

Traffic control: segregate pedestrians and vehicles, use cones, barriers, signage and reflective jackets; a marshal must never turn their back on moving traffic.

Parking plan: separate VIP, staff, media and public parking; keep fire lanes and emergency access routes clear at all times.

Hand signals must be exaggerated and consistent; at night use illuminated wands and high-visibility clothing.

Incident at a gate: close the lane, redirect to another gate, inform control room, do not argue with the crowd at the barrier.

Emergency vehicle access: pre-plan a route and a marshalling point; guards clear the route before the vehicle arrives.

Post-event: controlled dispersal, staggered exit, sweep of the venue for lost property and hazards, then debrief and report.

Radio discipline: listen before transmitting, use clear speech, keep messages short, use phonetic alphabet for letters and standard numbers for figures.

Phonetic alphabet examples: Alpha, Bravo, Charlie, Delta, Echo, Foxtrot; digits are spoken individually (one-zero for 10).

Daily occurrence book (DOB) records every event chronologically with time, place, persons, action and outcome - written in ink, no erasures.

Incident report elements: who, what, when, where, why, how, witnesses, evidence, action taken, and signature with date and time.

Report facts, not opinions: write 'the man was unsteady and smelled of alcohol' rather than 'the man was drunk'.

Preserve evidence: do not touch, move or clean items until police or management authorise; record the scene as found.

Communication escalation: guard → supervisor → control room → emergency services/management, with acknowledgement at each step.

Confidentiality of reports: stored securely, released only to authorised persons, and personal data handled per data protection rules.

CCTV components: camera, lens, transmission, recorder (DVR/NVR) and monitor; coverage must include entries, exits, cash areas and high-value stores.

Camera types: dome (discreet, vandal-resistant), bullet (long range), PTZ (pan-tilt-zoom), and fixed; IR enables night viewing.

Retention and chain of evidence: exported footage must be copied with hash or sealed, logged, and handed over with a signed record.

Access control system elements: reader, controller, electric lock, request-to-exit device, door contact and power supply.

Intrusion detection: PIR (passive infrared) detects body heat movement; magnetic reed switches detect door opening; vibration and glass-break sensors detect forced entry.

Alarm response: verify the alarm, respond with a colleague, never enter alone, and record the outcome even if it is a false alarm.

Metal detectors and X-ray: walk-through detectors find ferrous metal; hand wands supplement; operators must be trained to interpret images.

Equipment care: daily functional check, fault log, battery backup test, and immediate reporting of any camera or lock failure.

A private security guard has no police powers: no power to arrest on suspicion alone, no power to search a person without consent or legal authority.

Citizen's arrest (e.g., under Indian CrPC Section 43 / BNSS 2023 Section 35) is limited to a person in the act of committing a non-bailable offence or a proclaimed offender; hand over to police promptly.

Private search requires consent; refusal means the person is denied entry or police are called - force is not used.

Detention must be brief and for a lawful purpose; the detained person must be informed of the reason and handed to police without delay.

Use of force must be necessary and proportionate; excessive force exposes the guard and employer to civil and criminal liability.

Human rights: dignity, non-discrimination, freedom from torture and arbitrary detention apply to everyone, including suspected offenders.

Privacy: CCTV must not cover private areas, footage must not be shared on social media, and personal data is protected.

Ethics: honesty, impartiality, confidentiality, no corruption; a guard reports misconduct even when it involves a colleague or supervisor.

Patrol types: fixed post, foot patrol, vehicle patrol, and random patrol; vary routes and timing to avoid predictability.

Patrol technique: check doors, windows, locks, lighting, fire equipment, unauthorised persons and safety hazards; record each checkpoint.

Handover and takeover: count keys, check equipment, read the occurrence book, receive briefing, and sign the relief register.

Visitor and vehicle procedure: stop, greet, identify, verify purpose, check ID, issue pass, log, direct, and record exit.

Responding to an incident: assess, secure the scene, call for backup, preserve evidence, record, and report - do not act alone if risk is high.

Bomb threat call: stay calm, keep the caller talking, note exact words, background noise, accent, time, and report immediately without using radios near suspected devices.

Suspicious object: do not touch, do not use radio or mobile near it, cordon the area, evacuate, and call police.

Post-incident: preserve the scene, write the report before the end of shift, brief the supervisor, and attend debrief to identify lessons.

Universal human rights apply to all persons regardless of status: dignity, equality, non-discrimination, freedom from torture and arbitrary detention.

Use of force must be lawful, necessary, proportionate and minimal; force is never used as punishment or to extract information.

Detained persons must be treated humanely, informed of the reason for detention, and handed to police promptly.

Non-discrimination: no different treatment based on religion, caste, gender, language, disability, nationality or appearance.

Privacy and dignity: searches by same-gender staff where possible, in a private area, with a witness and consent.

Whistleblowing and reporting: a guard must report misconduct, corruption or abuse even if it involves a colleague or supervisor.

Ethical dilemmas: follow the law and the code of conduct, document the decision, and escalate to the supervisor.

Accountability: every action is recorded, reviewable and subject to disciplinary and legal scrutiny.

First response at a scene: secure the area, check for casualties, call emergency services, preserve evidence, and record everything.

Crowd control at a gate: keep the barrier line, use clear commands, do not grab individuals, and call for backup before a surge.

Emergency evacuation assistance: guide occupants to the nearest safe exit, check toilets and side rooms, and report the area clear.

Key handling: sign out, carry securely, never leave keys in locks, return and sign in at end of shift.

Communication failure: use a runner or landline, keep the last known message, and inform the control room of the outage.

Documentation discipline: incident report within the shift, occurrence book entry, and evidence log with time and signature.

Physical fitness and situational awareness: maintain a safe distance, keep an exit route, and never turn your back on a crowd or a suspect.

Shift discipline: arrive early for briefing, do not leave post without relief, and report any equipment fault immediately.

Patrol checks: doors, windows, locks, lighting, fire equipment, unauthorised persons, safety hazards and suspicious objects - record each.

Visitor procedure: stop, greet, identify, verify purpose, check ID, issue pass, log entry, direct, and record exit.

Incident response: assess, secure the scene, call backup, preserve evidence, record and report; never act alone where risk is high.

Bomb threat: stay calm, keep the caller talking, note exact words, background noise, accent and time; report immediately.

Suspicious object: do not touch, do not use radio or mobile nearby, cordon the area, evacuate and call police.

Handover: count keys, check equipment, read the occurrence book, receive briefing and sign the relief register.

Detention: only for a lawful purpose, brief and humane, reason stated, handed to police promptly.

Post-incident: preserve the scene, write the report before shift end, brief the supervisor and attend the debrief.