CSG Exam (Malaysia) cheat sheet

Security Guards Act 1971 (Act 37) is the principal Malaysian law licensing security guard agencies and registering individual guards; it is administered by the Ministry of Home Affairs (KDN) through the Security and Public Order Division.

A guard on duty must carry the KDN-issued security guard identity card and wear the licensed agency's approved uniform; lending, altering or forging the card is an offence.

Private guards are not police officers: they have no powers of search, detention, investigation or arrest beyond those of any private citizen.

Citizen's arrest: under section 27 of the Criminal Procedure Code (Act 593), a private person may arrest someone committing a non-bailable cognizable offence in his view and must hand the person to police without unnecessary delay, using no more force than necessary.

Core Penal Code offences a guard reports include criminal trespass (s.441/447), theft (s.378), robbery (s.390), assault (s.351) and impersonating a police officer (s.170).

Private security work does not authorize firearms; any firearm requires a separate licence under the Arms Act 1960 (Act 206), while batons, handcuffs and guard dogs require agency authorization and client approval.

Personal Data Protection Act 2010 (Act 709) applies to visitor logs, CCTV footage and guard records: collect only what is needed, secure it, and disclose only with lawful authority.

Occupational Safety and Health Act 1994 (Act 514), as amended with effect from 2024, imposes employer duties to provide safe systems of work, risk assessments, training and PPE to guards.

Security guards are employees under the Employment Act 1955; working hours, rest days, overtime and the applicable Minimum Wages Order must be observed by the agency.

Core duty order: protect people first, then property, then information; the operational cycle is deter, detect, delay, respond and report.

A guard's authority comes only from the law, the client contract and the post orders; a guard cannot exceed the client's authority to search, detain or confiscate.

Use of force must be necessary to prevent imminent harm, proportionate to the threat, stopped when the threat ends, and reported in writing after every use.

Conflict of interest: do not accept gifts, loans or favours from contractors, visitors or tenants that could influence a decision; declare any personal relationship with a person being screened.

Confidentiality: post orders, access codes, key locations, CCTV layout and incident details are disclosed only on a need-to-know basis.

On-duty conduct: correct uniform, visible ID, no sleeping, no personal phone use, no alcohol or drugs, punctuality, and a proper written handover at shift change.

Duty of care: intervene only within training and authority, call for help early, and never abandon a post without a relief or supervisor instruction.

Non-discrimination and courtesy: equal treatment regardless of race, religion, gender or nationality, consistent with Article 8 of the Federal Constitution.

Report misconduct: bribery (MACC Act 2009), harassment or colleague wrongdoing is reported through the supervisor or the agency's whistleblowing channel.

Access control objectives: permit authorized people, assets and vehicles; deny unauthorized entry; record and audit every entry and exit.

Three authentication factors: something you know (PIN/password), something you have (card/key/token) and something you are (fingerprint/face/iris).

Least privilege: issue the minimum access level for the shortest time needed, and revoke access on termination or contract end the same day.

Visitor process: greet, establish purpose, verify photo ID, confirm host approval, issue a colour-coded badge, log time in, escort where required, recover the badge and log time out.

Never rely on a uniform alone; politely challenge any person without a visible badge and ask to see the pass.

Tailgating and piggybacking prevention: one person per card swipe, anti-passback, turnstiles or mantraps, door alarms and staff education.

Delivery control: verify the consignment against the manifest, inspect for tampering, direct to the loading bay, and never allow unchecked packages into secure areas.

Vehicle access: verify plate and driver against the approved list, issue a visitor pass, use mirrors or undercarriage checks where required, and log entry and exit.

Key control: sign out keys by name, time and purpose; verify return; master keys are held only by designated senior staff.

Patrol purposes are to deter, detect, report and reassure; randomize timing and routes so that patterns cannot be predicted.

Patrol types include foot, vehicle, bicycle, static and clocking-checkpoint patrols; each checkpoint is recorded to prove coverage.

Observation sequence: stop, look, listen and smell; scan near-to-far and left-to-right; allow 5–10 seconds for eyes to adjust to darkness.

Baseline principle: know what is normal for the site (lights, doors, sounds, smells) so anomalies stand out; investigate from a safe distance.

Person description head-to-toe: sex, age, height, build, hair, face, clothing, footwear, scars or tattoos, voice and direction of travel.

Vehicle description uses CYMBALS: Colour, Year, Make, Body type, Accessories, Licence plate, State, plus occupants and direction.

CCTV monitoring: watch behaviour rather than identity, record camera number, time and description, and never zoom into private areas.

Surveillance must be lawful and proportionate: no covert recording in private spaces, and footage is retained only as long as the PDPA purpose requires.

Personal safety on patrol: carry a working radio, tell control your route, never enter a dark or confined space alone, and withdraw and call police if a threat is armed.

Priority order at any incident: life safety, incident stabilization, property and environment protection, then preservation of evidence.

First actions: assess danger, call for backup or police (999) with exact location and situation, then secure the scene and keep witnesses separate.

Do not disturb a crime scene; record who entered, when and why; use barriers and maintain chain of custody for any item that must be moved.

Emergency evacuation: activate the alarm, call BOMBA (999), guide people by the nearest safe route to the assembly point, conduct a roll call and report missing persons.

Fire response RACE: Rescue anyone in danger, Alarm, Contain by closing doors, Evacuate or Extinguish only if trained and safe.

Bomb threat: do not use radios or mobile phones near a suspicious item, do not touch it, evacuate the area, call police and record the caller's exact words.

Lockdown: secure doors, move people away from windows, stay quiet, and await police clearance; do not open for anyone without verified authority.

Report writing: answer who, what, when, where, why and how; use facts and exact quotes, not opinions; time-stamp and sign; never backdate or alter.

Notify the supervisor immediately for serious incidents; a police report is required for offences, and the agency incident report is completed before the end of shift.

Fire tetrahedron: fuel, oxygen, heat and chemical chain reaction; removing any one element extinguishes the fire.

Fire classes: A solids (water/foam), B flammable liquids (foam/CO2/dry powder), C gases (dry powder), D metals (special powder), E electrical (CO2/dry powder), F cooking oil (wet chemical).

PASS technique: Pull the pin, Aim at the base, Squeeze the handle, Sweep side to side, keeping a clear exit behind you.

DRSABCD: Danger, Response, Send for help (999), Airway, Breathing, CPR, Defibrillation.

CPR for an adult: 30 compressions to 2 breaths, centre of the chest, depth 5–6 cm, rate 100–120 per minute; use an AED as soon as available.

Choking adult: give 5 back blows then 5 abdominal thrusts; if the person becomes unconscious, lower to the floor and start CPR.

Severe bleeding: direct pressure with a clean dressing, elevate if possible, do not remove soaked dressings, add more on top and call 999.

Burns: cool with running water for 20 minutes, remove jewellery, cover loosely, and do not pop blisters or apply ointments.

OSHA duties: report accidents and near-misses to the employer, use PPE, follow safe work procedures, and never operate equipment without training.

CCTV camera types: dome (discreet, indoor), bullet (long range, visible deterrent), PTZ (pan-tilt-zoom, wide area) and fisheye (360-degree coverage).

CCTV evidence: export with correct date, time, camera ID and player software, check time synchronization, log the export and maintain chain of custody.

Privacy: CCTV must not cover toilets or changing rooms, signage must inform, and footage is retained only as long as needed under the PDPA.

Alarm components: sensors (PIR, door contact, glass break), control panel, keypad, siren, communicator and monitoring station.

False alarm causes: loose doors, pets, insects, draughts, low batteries and user error; verify the alarm before requesting a response.

Fail-safe versus fail-secure locks: fail-safe unlocks on power loss for fire egress; fail-secure stays locked and needs a break-glass or mechanical override.

Access control system: card reader, controller, electric strike or maglock, request-to-exit, door sensor and backup power; test release devices monthly.

Radio communication: use call signs, press-to-talk, pause before speaking, use the phonetic alphabet (Alpha, Bravo, Charlie) and avoid sensitive details on open channels.

Start-of-shift equipment checks: test torch, radio, keys and body camera, and log any fault; never use faulty equipment.

Communication model: sender, message, channel, receiver, feedback and noise; confirm understanding by repeating the message back.

Active listening: face the speaker, maintain appropriate eye contact, nod, paraphrase, ask open questions and do not interrupt.

Radio discipline: identify yourself, state location and situation, keep messages brief, use over and out correctly, and avoid slang.

Customer service: greet promptly, use the person's name, explain what you can and cannot do, offer alternatives and follow up.

Complaint handling LAST: Listen, Apologise for the experience, Solve within authority, Thank the person; escalate if the request exceeds authority.

Never promise outcomes you do not control; say you will report the matter to your supervisor and give a realistic response time.

Police liaison: call 999, give exact location, nature of incident, number of people, weapons, injuries, your name and a call-back number.

Media and public inquiries: refer to the client's communications team or agency management; do not comment or speculate.

Confidentiality: share information only with police, management or authorities who have a lawful need, and log every disclosure with time, recipient and reason.