NAVTTC Security Supervisor/Manager common mistakes
NAVTTC Security Supervisor/Manager · Understand the traps and how to avoid them.
When a question describes a security officer who spots a fire or a casualty, the candidate jumps straight to 'call the fire brigade' or 'evacuate the building' instead of first stating the immediate life-safety action and the correct sequence (raise the alarm, then evacuate, then call).
Candidates memorise a single 'emergency number' answer and treat all emergency questions as a phone-call question, so they skip the ordered response steps the scenario is testing.
What to do instead
Drill a fixed priority ladder for every emergency scenario: preserve life first, then raise the alarm, then contain the incident, then call external services, then preserve the scene and record. Practise writing the ladder out for fire, medical, bomb-threat and intruder cases until the order is automatic.
The candidate answers fire-extinguisher questions with a generic 'use the nearest extinguisher' rather than matching the class of fire (A, B, C, D, F/K) to the correct extinguisher and stating the PASS technique and when to abandon the attempt.
Extinguisher types are learned as a list to memorise, not as a decision rule, so under exam pressure the candidate reaches for the familiar 'water or CO2' answer regardless of the fuel involved.
What to do instead
Build a one-page matrix of fire classes against extinguisher types, including the dangerous mismatches (water on electrical or cooking-oil fires, CO2 limitations on Class A). For each row, rehearse the rule: only fight a fire if it is small, you have a clear escape route, and you have been trained; otherwise evacuate and close doors.
On access-control scenarios the candidate proposes a single control (for example, 'install a turnstile' or 'issue ID cards') instead of layering procedural, physical and electronic controls and explaining how each is verified.
Access control is studied as a list of hardware, so candidates answer with equipment names and forget that the exam is testing defence in depth and the human process around the device.
What to do instead
Answer every access-control question in three layers: procedural (authorisation, visitor logging, escort rules), physical (barriers, mantraps, locks), and electronic (card, biometric, PIN, audit trail). Add how each layer is tested and reviewed, and practise stating the weakest link in any proposed design.
The candidate treats risk assessment as a definition question and gives 'identify hazards, assess risk, control it' without applying a likelihood-by-impact rating, ranking risks, or stating how controls are monitored and reviewed.
The risk process is learned as a three-step slogan, and candidates never practise carrying a scenario through scoring, prioritisation and residual-risk review.
What to do instead
Use a fixed template for every risk scenario: asset, threat, vulnerability, likelihood score, impact score, risk rating, control, residual rating, owner, review date. Rehearse it on three short scenarios (vehicle gate, cash office, loading bay) until the scoring and the review step appear without prompting.
When a question involves an incident, the candidate describes what should have been done operationally but omits the written record entirely, or writes a report that mixes opinion, hearsay and fact without timestamps.
Candidates separate 'doing security' from 'documenting security' and see report writing as an afterthought rather than a scored competency.
What to do instead
End every operational answer with the documentation step: what is recorded, when, by whom, in what format, and who receives it. Practise writing a short incident note containing only observed facts, exact times, names and roles, actions taken, and a clear statement of what is opinion or second-hand.
On CCTV and alarm questions the candidate recommends more cameras or a newer system as the fix, without addressing coverage gaps, privacy signage, retention periods, footage handling, false-alarm management or who is authorised to view recordings.
Technology questions attract gadget answers, and candidates underweight the governance layer that the syllabus pairs with every device.
What to do instead
For any technology question, answer in four parts: purpose and coverage, operation and monitoring, data governance (access, retention, lawful basis, signage), and maintenance and testing. Memorise typical retention and audit-trail expectations and practise stating who may export footage and how the chain of custody is kept.
The candidate answers disciplinary or use-of-force scenarios by choosing the most forceful or most punitive option, or by saying the officer should 'handle it informally', instead of applying minimum force, proportionality and correct escalation.
Candidates confuse firmness with effectiveness and have not internalised that lawful authority is bounded by necessity and proportionality, so they pick the decisive-sounding answer.
What to do instead
Learn the proportionality test and apply it out loud to scenarios: was force necessary, was it the minimum required, was it proportionate to the threat, was it recorded and reported. Rehearse de-escalation first, then lawful physical intervention, then immediate reporting and medical check.
On supervision questions the candidate solves the problem personally ('I would check the gate myself') rather than describing delegation, briefing, performance monitoring, coaching and escalation through the team.
Many candidates answer from the perspective of a front-line officer rather than a supervisor, so they demonstrate competence at the wrong level.
What to do instead
Before answering any supervision question, ask 'what does a supervisor do that an officer does not?' and answer with briefing, task allocation, spot checks, coaching, welfare checks, record keeping and escalation. Practise converting officer-level answers into supervisor-level answers by adding who is tasked, how it is verified and how it is followed up.
The candidate treats health and safety as a separate topic from security duties and fails to link workplace hazards (slips, manual handling, lone working, fatigue, violence at work) to the supervisor's duty of care and reporting obligations.
Occupational health is revised last and in isolation, so candidates do not connect it to the operational scenarios where it is actually tested.
What to do instead
Attach a safety check to every operational scenario you practise: what hazard exists here, what control is required, who is responsible, and what must be recorded. Learn the supervisor's duty-of-care duties and the difference between a hazard report and an incident report.
The candidate answers customer-service and information-security questions with generic courtesy ('be polite, smile') or generic confidentiality ('keep it secret') without naming concrete behaviours such as need-to-know, verifying identity before releasing information, or handling a difficult visitor through a defined escalation path.
These domains feel like common sense, so candidates do not prepare specific, examinable behaviours and fall back on vague virtue words.
What to do instead
Convert each soft domain into named behaviours: for service, greeting script, active listening, explaining the reason for a control, offering an alternative, escalation; for data protection, need-to-know, identity verification, secure storage, no discussion of individuals in public areas, and reporting a suspected breach immediately. Practise writing each as a concrete action a supervisor could observe.