PNP-SOSIA Security Guard cheat sheet

A private security officer is a private citizen with no police powers; authority derives from the property owner's consent, contract, and citizen's arrest law.

Core duties: protect life and property, deter and detect crime, observe and report, control access, respond to emergencies, and preserve evidence until authorities arrive.

Security officers are not first responders under statute; police retain sole authority for criminal investigation, search warrants, and custody decisions.

Duty of care: officers owe lawful visitors reasonable care to prevent foreseeable harm; negligence liability can attach for unsafe premises conditions they knew or should have known about.

Trespass is a civil wrong; a person's licence to be on premises may be express (invitation/ticket), implied (public areas), or revoked by lawful request to leave.

Officers must identify themselves and their employer when exercising authority, and must not imply police status or use titles, uniforms, or badges suggesting police office.

Report writing is a legal record: contemporaneous notes may be disclosed in court, so record facts observed, times, and exact words spoken, not opinions.

Confidentiality: personal data collected during duty is protected under Singapore's PDPA; disclose only to authorised persons or on lawful request by police.

Theft (Penal Code s.378): dishonest moving of movable property out of a person's possession without consent; a security officer's observation of the act, time, and property description supports prosecution.

Robbery (s.392) is theft with force or threat of instant force; extortion (s.383) is inducing delivery by threat of future harm - the distinction is force now vs. threat of future injury.

House-breaking (s.441-447) requires entry into a building with intent to commit an offence; note whether entry was by a permanent opening or by breaking.

Criminal trespass (s.441) is unlawful entry onto property with intent to commit an offence; mere unauthorised entry without intent may be civil trespass only.

Assault (s.351) is an act causing apprehension of immediate harm; hurt (s.319) requires actual bodily pain, disease, or infirmity - record injuries and medical evidence.

Voluntarily causing hurt to deter a public servant from duty is an aggravated offence; security officers performing contracted duty are generally not public servants, so accuracy matters.

Cheating (s.415) involves deception inducing delivery of property; security staff at access points should record false identity documents and retain the physical document.

Mischief (s.425) is intentional damage to property; photograph damage before repair and preserve CCTV clips for chain-of-evidence purposes.

The Private Security Industry Act (PSIA) regulates security officers and security service providers in Singapore; the Police Licensing and Regulatory Department (PLRD) administers licences.

A Security Officer licence is required to perform security duties for reward; working unlicensed is an offence for both the officer and the deploying company.

Licence conditions include passing required training, medical fitness, and no prescribed criminal record disqualification; PLRD may refuse, suspend, or revoke a licence.

Security officers must carry their licence or identification while on duty and produce it on demand to an authorised officer or police officer.

Security service providers need an operator licence; deploying unlicensed officers or failing to maintain records is an offence under the PSIA.

Certain security activities (e.g., armed guarding, auxiliary police functions) require additional endorsements beyond the basic SO licence.

Licence renewal is time-limited; officers must complete required refresher training before renewal and must report changes in personal particulars to PLRD.

Security officers must not wear police-like insignia or use the word 'police' in titles; PSIA and related regulations restrict uniforms and titles to avoid impersonation.

Three-step access control: verify identity, verify authorisation, then record entry - never skip verification because the visitor is known to the officer.

Visitor log fields: full name, NRIC/FIN or passport number, company, host name, purpose, time in, time out, and vehicle plate if applicable.

Escort rule: visitors without a valid pass must be escorted at all times; unescorted access is a breach to be logged and reported.

Contractor control: check work permit, method statement or permit-to-work, tool inventory, and induction record before allowing entry to restricted areas.

Tailgating and piggybacking are the most common access breaches; position the officer to observe the reader, not the person's face, and challenge politely.

Lost or forgotten pass procedure: verify identity against an authorised list, issue a temporary pass with expiry, and log the issue and return.

Restricted-area entry requires two-factor authorisation: named approval plus physical credential; verbal approval must be recorded with the approver's name and time.

Refusal to leave after lawful revocation of licence becomes trespass; record the exact words of the request to leave, the time, and witnesses.

Patrol types: fixed post, foot patrol, vehicle patrol, and clock-based rounds; each has a defined route, checkpoint list, and expected timing tolerance.

Checkpoint systems (clock keys, QR, NFC) create a verifiable record; missed or out-of-sequence checkpoints must be explained in the patrol log.

Observation standard: record who, what, when, where, how, and how many - descriptions should include height, build, clothing, distinguishing marks, and direction of travel.

CCTV review: preserve the original file with hash or export log; note camera ID, time stamp, and any clock offset between system time and actual time.

Incident report structure: date/time, location, persons involved, sequence of events in chronological order, action taken, witnesses, evidence retained, and reporting officer.

Do not write conclusions or opinions in reports ('he seemed drunk'); write observable facts ('smelled of alcohol, unsteady gait, slurred speech').

Preserve the scene: restrict access, do not move items unless necessary for safety, and record any item moved with its original position.

Report escalation matrix: immediate call to police for crime in progress or injury; notify supervisor for property damage or policy breach; written report within shift.

Fire alarm response sequence: confirm alarm location on panel, investigate with a partner, raise alarm and call SCDF if fire is confirmed, then evacuate.

Never use lifts during a fire evacuation; direct occupants to the nearest protected staircase and keep the escape route clear.

Evacuation assembly area must be pre-identified, upwind of the building, and far enough to avoid falling debris; conduct headcount against visitor and staff logs.

Fire extinguisher use (PASS): Pull pin, Aim at base of fire, Squeeze handle, Sweep side to side; only attempt on small, contained fires with a clear escape route.

Extinguisher classes: water (Class A), foam (A/B), CO2 (B/E electrical), dry powder (A/B/C/E); never use water on live electrical or cooking oil fires.

Fire safety equipment must not be obstructed: minimum 1 m clearance around extinguishers, hose reels, and exit doors; exit doors must open in the direction of travel.

Bomb threat: do not use radios or mobile phones near the suspected device; record the caller's exact words, background noise, and time, then evacuate and call police.

Emergency contact order: internal emergency line, SCDF 995, police 999, then supervisor and building management; log all calls with times.

The Workplace Safety and Health Act imposes duties on employers and workers; workers must follow safe work procedures and report hazards and incidents.

Risk assessment (RA) identifies hazards, evaluates likelihood and severity, and records control measures; security duties must be covered by a site-specific RA.

Common security hazards: slips/trips, lone working, workplace violence, night-shift fatigue, manual handling, and vehicle movement at gates.

Lone working controls: check-in schedule, personal duress alarm, supervisor contact, and defined escalation if check-in is missed.

Incident reporting: report near-misses as well as injuries; near-miss data is used to prevent recurrence and is required under WSH reporting practice.

Manual handling: assess load, keep load close to the body, bend knees not the back, and use team lift or trolley above safe individual limits.

Fatigue management: maximum continuous shift limits and rest breaks apply; report inability to stay alert rather than concealing drowsiness.

PPE for security duties: high-visibility vest at vehicle gates, safety footwear on industrial sites, gloves for searching, and torch for night patrols.

Communication model: sender, message, channel, receiver, feedback, and noise; confirm understanding by asking the person to repeat the instruction.

De-escalation sequence: calm tone and open posture, acknowledge the person's concern, state the limit clearly, offer options, then escalate if behaviour continues.

Use 'I' statements and neutral language ('I need you to step back') rather than accusations ('You are being aggressive').

Active listening: paraphrase, reflect feeling, ask open questions, and allow silence; avoid interrupting during the person's first explanation.

Radio protocol: identify station, keep messages short, use plain language, confirm receipt, and never transmit personal data on open channels.

Conflict triggers commonly include perceived disrespect, delay, loss of face, and inconsistent enforcement; consistency across officers reduces complaints.

Service recovery: apologise for the experience (not admission of liability), explain what will happen next, and give a realistic time frame.

When to disengage: if the person is armed, threats escalate to violence, or the officer is alone without backup, withdraw and call police.

Use of force must be lawful, necessary, and proportionate; the minimum force required to achieve a lawful objective, stopped as soon as the objective is met.

Citizen's arrest (Criminal Procedure Code) is limited to arrestable offences or where a person is found committing an offence; the person must be handed to police without unnecessary delay.

Arrest procedure: identify yourself, state that the person is under arrest, state the offence, apply restraint only if resistance occurs, and inform police immediately.

Search on arrest: a private citizen's search powers are very limited; for safety, request police attendance rather than conducting a personal search.

Restraint risks: positional asphyxia from prone restraint or pressure on the back/neck; move the person to a seated or recovery position as soon as safe.

Handcuffing: check tightness, double-lock, and remove once the risk of harm has passed; document the reason, duration, and any injury.

After-force duties: summon medical aid if injury is suspected, record the force used and why, preserve CCTV, and notify supervisor and police.

Never use force as punishment or to compel a statement; retaliatory force is unlawful and creates criminal and civil liability.

Access control systems: card, PIN, biometric, and mobile credential; two-factor means combining two different factors (e.g., card + PIN), not two cards.

CCTV components: camera, lens, image sensor, recorder (NVR/DVR), storage, and monitor; retention periods are set by policy and legal requirements.

Camera coverage rules: avoid pointing at private areas, entrances of neighbouring premises, or public roads beyond operational need; signage is required where personal data is captured.

Alarm systems: intrusion, panic, and fire alarms must be on separate zones; false alarm causes include poor door alignment, loose contacts, and environmental triggers.

Fire alarm panel states: normal, alarm, fault, and isolate; an isolated zone must be logged and restored at the end of the work period.

Radio and duress devices: test batteries and signal coverage at the start of shift; a duress alarm must trigger a defined response, not just a sound.

Data protection: CCTV footage is personal data under the PDPA; access is restricted, exports are logged, and requests from third parties go to the data protection officer.

Equipment handover: record serial numbers, condition, and faults at shift change; faulty equipment must be tagged and reported, not quietly returned to the rack.