PNP-SOSIA Security Guard common mistakes
PNP-SOSIA Security Guard · Understand the traps and how to avoid them.
When a question describes a guard who sees a suspected theft or a fight, the candidate answers that the guard should 'arrest the person' or 'detain them until police arrive', treating citizen's arrest as the default first action rather than a last resort.
Candidates conflate the security officer's authority with police powers, and they have memorised that private citizens may arrest in limited circumstances without learning the threshold conditions (offence must be arrestable/serious, reasonable suspicion, immediate pursuit, prompt handover to police). Under exam pressure the dramatic answer feels 'decisive'.
What to do instead
Drill the decision sequence as a fixed order: observe and assess, ensure personal safety and that of others, prevent escalation and preserve evidence, call police, and only then consider a citizen's arrest where the legal threshold is met and it is safe and necessary. Practise sorting scenarios into 'arrest permitted', 'detain for police' and 'no power to detain' using the specific statutory wording for your jurisdiction.
The candidate states that a security officer may search a person's bag or conduct a pat-down simply because the person is entering the premises, without identifying the source of that authority (consent, a contractual condition of entry, or a statutory power).
In day-to-day work guards search bags constantly and the habit feels automatic. Candidates therefore answer from routine practice rather than from legal basis, and miss that refusal of consent changes the lawful options (refuse entry, not physically force a search).
What to do instead
For every search question, force yourself to name the authority first: consent, condition of entry, or statute. Then state the consequence of refusal. Learn to phrase it as 'request and, if refused, deny entry or call police' rather than 'search the person'.
The candidate describes using force as a response to disrespect, verbal abuse, non-compliance or 'attitude', or describes force as punishment or to teach someone a lesson.
Real-world frustration and the emotional framing of scenario questions pull candidates toward justifying force. Many candidates also never learned that force must be objectively reasonable, necessary and proportionate to the actual threat, and must stop once resistance ceases.
What to do instead
Apply a written test to each force scenario: Was there an imminent threat? Was force necessary because no lesser option worked? Was the amount proportionate? Did it stop when the threat ended? Rehearse the graduated options (presence, verbal direction, tactical repositioning, escort, restraint) and always attach the reporting and medical-check follow-up.
The candidate answers that the guard should 'call the police' or 'call the fire service' as the whole answer, omitting the on-scene actions the guard must take first or simultaneously (raise the alarm, evacuate, account for people, secure the scene, preserve evidence, record times).
Emergency questions reward the visible external action, and candidates under time pressure write the single most obvious step. They also underestimate how much of the mark comes from the sequence and the guard's own duties before arrival of the authorities.
What to do instead
Answer emergency questions with a timeline: immediate life-safety action, alarm and notification, containment or evacuation, accounting for persons, handover to emergency services with a briefing, then documentation. Name who does what and in what order.
The candidate treats fire safety as 'call the fire brigade and point people at the exit', missing the specific duties: activating the alarm, using the correct evacuation route and assembly area, not using lifts, closing doors, checking accessible evacuation needs, and never re-entering the building.
Fire content is studied as general knowledge rather than as a role-specific procedure, so answers stay generic. Candidates also mix up evacuation versus relocation versus shelter-in-place and default to evacuation every time.
What to do instead
Memorise the building's stated procedure as a checklist and practise distinguishing evacuation, relocation and shelter-in-place triggers. Learn the assembly-area roll-call process, the buddy/refuge concept for people who cannot use stairs, and the rule that re-entry is only on the fire service's authority.
The candidate writes incident reports in vague, opinion-based language such as 'the man was aggressive and acting suspiciously', 'he was drunk', or 'I dealt with it', without times, exact words, descriptions, actions taken or continuity of evidence.
Candidates write as they speak, and everyday shorthand is full of conclusions rather than observations. They also do not realise that report-writing questions are marked against criteria such as factual observation, chronology, and separating what was seen from what was inferred.
What to do instead
Practise converting judgements into observations: 'shouting, clenched fists, swaying, smelled of alcohol, speech slurred' instead of 'drunk and aggressive'. Use a fixed skeleton for every report answer: date/time/location, persons and descriptions, what was observed, exact words in quotation marks, action taken, witnesses, evidence and property handling, signature and time of completion.
The candidate confuses the roles of the regulator, the licensing body and the employer, for example stating that the security company issues the guard's licence, that the licence is transferable between employers, or that training certificates alone authorise work.
Licensing content is dense and full of similar-sounding terms (licence, permit, registration, training certificate, employer, regulator). Candidates skim it and rely on workplace hearsay about how licensing 'really works'.
What to do instead
Build a one-page table with columns for each body and each document: who issues it, who holds it, what it authorises, its validity and renewal, and the consequences of working without it. Learn the specific offences for unlicensed guarding and for supplying unlicensed guards, and test yourself by explaining the chain from training to deployment.
The candidate answers workplace safety questions by naming the hazard but not the control, or gives a control that does not match the hazard hierarchy, such as 'tell the guard to be careful' for a wet floor or 'wear gloves' for a lone-working risk.
Candidates treat WSH as common sense and skip the formal hierarchy of controls. They also answer from the guard's perspective instead of the employer's duty to identify hazards, assess risk and put controls in place.
What to do instead
For each hazard, answer in the hierarchy: eliminate, substitute, engineering control, administrative control, then PPE as the last layer. Prepare a short list of guard-specific hazards (slips, lone working, aggression, fatigue and shift work, manual handling, heat, electrical and fire equipment) each with a concrete control and a reporting step.
The candidate answers a conflict or angry-customer scenario by asserting authority, threatening arrest or removal, or matching the person's tone, instead of de-escalating through communication.
Candidates picture the guard as an enforcer and believe a firm show of authority is what the exam wants. They also lack a structured de-escalation model, so under pressure they default to confrontation.
What to do instead
Learn and apply a named de-escalation sequence in every conflict answer: assess the situation and your safety, create distance and an exit, use a calm and low tone, use the person's name, acknowledge the concern, offer limited choices, set clear boundaries with stated consequences, and only escalate to removal or force if the behaviour makes it necessary. Include the follow-up report and welfare check.
The candidate treats technology as a substitute for the officer, for example stating that CCTV replaces patrols, that recorded footage is automatically admissible and sufficient, or that a camera operator may zoom into private areas or keep footage indefinitely.
Candidates underestimate the legal and procedural limits of surveillance and overestimate what equipment can prove. They also do not know the rules on privacy, retention, access to recordings and chain of custody for evidence.
What to do instead
Study technology as a tool with limits: what each system does, what it cannot do, who may access it, how footage is preserved as evidence with a documented chain of custody, retention and privacy rules, and the requirement that camera operators be trained and supervised. Pair every technology answer with the human verification and reporting step.