NSCDC Private Guard Exam cheat sheet

Critical infrastructure (CI) means assets, systems and networks so vital that their incapacitation or destruction would debilitate national security, the economy, public health or safety; the NSCDC is the lead agency for its physical protection in Nigeria.

Designated CI sectors in Nigeria include power and energy, oil and gas pipelines, telecommunications, water, transportation, banking and finance, health, and government facilities; each asset is assigned a protection tier by consequence of loss.

Physical protection system (PPS) layers follow detect-delay-respond: outer perimeter detection, then delay barriers, then response force arrival; a PPS is only effective if detection time plus delay time exceeds adversary task time (PPS effectiveness criterion).

Risk equals threat multiplied by vulnerability multiplied by consequence (R = T x V x C); mitigation lowers vulnerability, not threat, so hardening measures must target the highest vulnerability node first.

Perimeter intrusion detection uses concentric zones: outer fence line, sterile zone, inner structure; CCTV, vibration sensors and infrared beams must be alarm-linked to a monitored response point, not merely recorded.

Pipeline protection relies on right-of-way surveillance, pigging and pressure-drop monitoring for hot-tap and illegal bunkering detection; vandals typically target weld joints, valve manifolds and river crossings.

Access control uses the three-factor rule: something you know (PIN), something you have (card/token), something you are (biometrics); two factors from different categories constitute multi-factor authentication.

Insider threat controls include separation of duties, two-person integrity for critical switching or valve operations, vetting of staff, and audit of access logs; most pipeline and substation attacks involve collusion by insiders.

Incident reporting to the NSCDC follows the principle of immediate notification via the control room, preservation of the scene for evidence, and a written report capturing time, location, asset affected and estimated loss.

The disaster management cycle has four phases: mitigation, preparedness, response and recovery; mitigation and preparedness occur before an event, response and recovery after it.

Nigeria's disaster framework is coordinated by NEMA at national level, with State Emergency Management Agencies (SEMAs) and Local Emergency Management Committees (LEMCs); the NSCDC provides search, rescue and security support under the National Disaster Response Plan.

The incident command system (ICS) uses a single incident commander with sections for operations, planning, logistics and finance; unity of command means each responder reports to only one supervisor.

Disaster risk is expressed as Risk = Hazard x Exposure x Vulnerability divided by Capacity; increasing capacity reduces risk without changing the hazard.

Evacuation planning requires primary and secondary routes, assembly points upwind of hazard, headcount reconciliation, and designated marshals; fire evacuation uses the RACE sequence: Rescue, Alarm, Contain, Evacuate/Extinguish.

Fire classification: Class A ordinary combustibles (water), Class B flammable liquids (foam, CO2, dry powder), Class C electrical (CO2 or dry powder, never water), Class D metals (special dry powder), Class K cooking oils (wet chemical).

First aid priorities follow ABC: Airway, Breathing, Circulation; CPR compression rate is 100-120 per minute at a depth of about 5-6 cm for adults, with a 30:2 compression-to-breath ratio for single rescuers.

Triage sorts casualties by urgency: immediate (red), delayed (yellow), minor (green) and deceased/expectant (black); the goal is to do the greatest good for the greatest number, not first-come-first-served.

Emergency operations centres (EOC) use the common operating picture: a single incident log, resource tracking, and situation reports at fixed intervals to prevent duplication of effort among responding agencies.

The NSCDC is the statutory regulator of Private Guard Companies under the Private Guard Companies Act; no person may operate a guard company without a valid licence issued by the Minister of Interior through the NSCDC.

A PGC licence is issued for a defined term (typically renewable annually) and is not transferable; operating without a licence or after expiry is an offence attracting fines and possible prosecution.

Applicants must be registered as a limited liability company, have a minimum paid-up capital, provide a tax clearance certificate, and submit details of directors and principal officers for security vetting.

Guards must be vetted and screened for criminal records, trained in a recognised guard training programme, uniformed and issued an identity card; guards cannot carry firearms without separate authorisation under the Firearms Act.

Monitoring is by inspection: NSCDC officers conduct routine and unannounced inspections of guard posts, personnel records, training logs, uniforms and equipment, and may suspend or revoke a licence for breaches.

PGCs must maintain registers of guards employed, deployments, incidents and complaints, and must report criminal incidents at client premises to the nearest NSCDC office.

Annual returns and renewal applications must be filed before licence expiry; late renewal attracts penalties and continued operation on an expired licence is unlawful.

A PGC may not subcontract guard services to an unlicensed company or individual; the licensed company remains liable for the conduct of guards it deploys.

Grounds for revocation include fraud in the application, employment of unvetted or ex-convict guards without clearance, failure to maintain records, and unauthorised use of firearms or paramilitary uniforms.