NSCDC Private Guard Exam common mistakes
NSCDC Private Guard Exam · Understand the traps and how to avoid them.
Treating 'critical infrastructure' as any large or important building, so the candidate classifies a market, hotel or private estate as critical infrastructure and misses the designated-sector framing.
Candidates memorise the phrase 'important national assets' without learning the sector logic (energy, water, transport, communications, health, finance, government, food) and the 'lifeline/incapacitation' test that makes an asset critical.
What to do instead
Before answering, apply a two-part test: does the asset fall in a recognised lifeline sector, and would its destruction or disruption cause serious national, regional or public-safety harm? Practise sorting 20 sample assets into 'critical' and 'important but not critical' and justify each in one sentence.
Confusing the guard's protective role at a critical asset with the role of the police or military, answering that the guard should pursue, arrest or confront intruders.
Popular media images of security work and the presence of armed personnel at some sites lead candidates to overstate the private guard's legal powers of arrest and use of force.
What to do instead
Anchor every answer in the guard's actual mandate: deter, detect, delay, report and preserve the scene, with arrest only where law permits a citizen's arrest and force only in lawful self-defence. When a scenario offers 'chase the intruder' versus 'observe, record, alert control room and police', choose the latter.
Designing perimeter protection as a single line (one fence, one gate, one guard) and ignoring layered defence, standoff distance and redundancy.
Candidates think in terms of individual security measures rather than an integrated system, so they pick one control instead of combining deterrence, detection, delay and response.
What to do instead
Answer using the layered model: outer perimeter and standoff, then detection (fence sensors, CCTV, lighting), then delay (barriers, locks, turnstiles), then response (guard patrol, alarm monitoring). If an option adds a second independent layer or reduces single-point failure, it is usually the better answer.
Treating access control as a gate check only, forgetting visitor management, escort rules, key/card control, delivery inspection and insider threat.
Candidates focus on the visible front gate and overlook that most breaches at protected sites come through legitimate access - contractors, deliveries, tailgating and staff.
What to do instead
For any access-control scenario, run through the full cycle: authorisation, identity verification, badge issue and display, escort, logging, challenge of unbadged persons, and return/revocation of credentials. Also check whether the option addresses tailgating or insider collusion.
Answering disaster-management questions with response actions only, skipping mitigation, preparedness, and recovery, or misplacing an activity in the wrong phase.
Response is the most dramatic and memorable phase, so candidates default to it and forget that the disaster-management cycle is continuous and that activities like risk assessment, drills, warning systems and reconstruction belong to other phases.
What to do instead
Memorise the cycle as Mitigation – Preparedness – Response – Recovery, and for each sample activity ask 'when does this happen relative to the event?' Building codes and drainage are mitigation; drills and stockpiles are preparedness; evacuation and search-and-rescue are response; damage assessment and rebuilding are recovery.
Skipping the emergency action plan sequence - failing to state alarm activation, notification of emergency services, evacuation or shelter-in-place decision, accounting for personnel, and handover to responders in the right order.
Candidates describe what they would personally do rather than the site's formal emergency procedure, so steps are out of order or omitted under exam pressure.
What to do instead
Rehearse a fixed checklist for every emergency scenario: detect and confirm, raise alarm, notify control room and emergency services, decide evacuate or shelter, guide people via designated routes and assembly point, headcount and report, secure the site, hand over to responders, then record and debrief. Apply the same checklist to fire, bomb threat, flood and intruder scenarios.
Giving evacuation as the automatic answer to every hazard, including chemical release, severe weather or security incidents where shelter-in-place or lockdown is correct.
Candidates equate 'emergency' with 'evacuate' and do not consider that moving people through a contaminated or hostile environment increases harm.
What to do instead
Match the protective action to the hazard: fire and structural collapse usually mean evacuate; toxic gas, vapour cloud or civil disturbance outside usually mean shelter-in-place with ventilation shut down; active threat usually means lockdown. State the reason in the answer - the exam rewards the hazard-to-action match, not the most dramatic action.
Treating PGC licensing as a one-off certificate and ignoring the conditions attached - operating only in licensed areas, displaying the licence, notifying changes of ownership or directors, and renewing before expiry.
Candidates reduce licensing to 'obtain a licence and you are done', so they miss questions about compliance obligations, variation, suspension and revocation that flow from the licence.
What to do instead
Learn the licence lifecycle: application and vetting, grant with conditions, display and record-keeping, notification of changes, renewal before expiry, and grounds for suspension or revocation. When a scenario involves an unlicensed operator, an expired licence or a change of control, check the condition or notification duty before choosing an answer.
Confusing the roles of the regulator, the PGC and the client in monitoring - assuming the PGC self-certifies its own compliance or that the client has no duty to use a licensed company.
Candidates blur accountability because the same words (inspection, vetting, training) appear in several roles, and they have not mapped who does what.
What to do instead
Build a three-column table: regulator (licensing, inspection, registers, sanctions), PGC (recruitment vetting, training, uniforms and ID, records, reporting incidents), client (verify licence, define post orders, permit inspections, report concerns). Answer by asking 'who has the legal duty here?' rather than who is present on site.
Ignoring personnel-vetting and training requirements when answering PGC compliance questions, focusing only on the company's paperwork and physical equipment.
Candidates see licensing as an administrative filing exercise and forget that the licence regime exists to ensure guards are screened, trained, identifiable and fit for duty.
What to do instead
For every PGC compliance scenario, check four pillars: vetting of guards (background, criminal record, references), documented training and refresher, identification and uniform standards, and supervision and record-keeping. If an option breaches any pillar - unvetted guards deployed, untrained staff on a cash-in-transit post - it is the wrong answer.