NAVTTC Security Supervisor/Manager flashcards

33 cards. Read the term and the definition here. The deck at the top of this page is optional.

Risk score formula

Risk equals Likelihood multiplied by Impact, each scored 1 to 5. The product gives a 1 to 25 rating that sets treatment priority on the risk matrix.

Defence in depth

Layering independent controls so that failure of one layer does not expose the asset. Typical layers are perimeter, building envelope, internal zones, and access-controlled core.

Tailgating control

Preventing an unauthorised person from following an authorised person through a controlled door. Controls include turnstiles, mantrap portals, staffed reception, and one-credential-one-person rules.

Post orders

Written instructions for a specific post covering duties, authority limits, patrol routes, emergency actions, and reporting lines. They are the primary reference for a guard on duty.

Shift handover log

A signed record at change of shift covering open incidents, keys issued, equipment faults, pending visitors, and outstanding tasks. Both outgoing and incoming officers sign it.

Manning calculation

Weekly hours equal posts multiplied by hours per post multiplied by seven. Divide by 48 to 56 productive hours per guard to estimate headcount including relief cover.

Residual risk

The risk that remains after existing controls are applied. It is accepted only when it falls within the client's stated risk tolerance.

Threat-vulnerability-impact model

Risk arises where a credible threat meets an unmitigated vulnerability and produces a meaningful impact. Controls act on vulnerability or impact, rarely on the threat itself.

Assembly point rules

A designated location at least 50 metres from the building and upwind of likely smoke. Roll call is taken there and re-entry is forbidden until the incident commander clears it.

Evacuation drill frequency

Most commercial sites require at least two evacuation drills per year. Each drill records date, participants, evacuation time, and lessons learned for the after-action review.

Bomb threat checklist

Keep the caller talking and record exact words, voice, and background noise. Ask for location, timing, and device type, then notify police and the incident commander immediately.

Fire tetrahedron

The four elements needed for fire: fuel, oxygen, heat, and chain reaction. Removing any one element extinguishes or prevents the fire.

PASS technique

Extinguisher use: Pull the pin, Aim at the base of the fire, Squeeze the handle, Sweep side to side. Only use it with a clear escape route.

Adult CPR ratio

Thirty chest compressions followed by two rescue breaths, repeated. Compressions are 5 to 6 centimetres deep at 100 to 120 per minute, with an AED used as soon as available.

Pixel density rule

Camera image usefulness is judged by pixels per metre at the target, not megapixels. About 250 px/m supports recognition and 500 px/m supports identification.

CCTV chain of evidence

Exported footage must record camera ID, export time, operator, and a hash value. It is stored on write-once media to prove it was not altered.

Alarm delay zone

An intrusion alarm zone that starts an entry or exit timer before triggering. It allows authorised arming and disarming without raising a false alarm.

Proportionate use of force

Force must be lawful, necessary, and no more than needed to achieve a lawful objective. The guard disengages once the objective is met and reports the action.

Citizen's arrest limit

A private person may arrest only for an offence committed in their presence or where a lawful warrant applies. Police must be called and the person handed over promptly.

Consensual search

A search agreed by the person or permitted by a contractual site-entry condition. Forced personal search is not a guard power and must be referred to police.

Incident report structure

Covers who, what, when, where, why, how, actions taken, witnesses, and evidence references. Written in first person, past tense, facts only, without opinion or conclusions.

Radio protocol

Identify yourself, state the message briefly, and confirm receipt. Plain language is used for emergencies; standard codes are used only for routine traffic.

De-escalation sequence

Listen, acknowledge, clarify, offer options, set limits, then involve authority. Calm tone, open posture, and about one arm's length of distance support the process.

Situational leadership

Match supervision style to competence: direct new staff closely, coach developing staff, and delegate to experienced staff while retaining accountability.

Competency matrix

A grid mapping each guard against required skills such as first aid, fire warden, CCTV, and access control. It identifies training gaps and backup cover for critical posts.

Hierarchy of controls

Risk control order: eliminate, substitute, engineer, administrate, then personal protective equipment. PPE is the last line of defence, not the first choice.

Lone worker controls

Scheduled check-ins, a personal alarm, a charged mobile phone, and a supervisor contact plan. Missed check-ins trigger an escalation response.

Service recovery sequence

Acknowledge the problem, apologise for the experience, act to resolve it, and follow up. It converts a complaint into a retained relationship.

Data minimisation

Collect only the personal data needed for the security purpose and keep it only as long as required. Visitor logs and CCTV footage both fall under this rule.

Phishing indicators

Unexpected urgency, mismatched sender address, unusual attachments, and requests for credentials. Verify through an independent channel before acting.

Clean desk principle

Lock screens when leaving, secure paper records, and never write passwords on notes. It reduces physical and information exposure in shared security areas.

Conflict of interest

A personal or financial interest that could bias a security decision. It must be declared and the person withdrawn from that decision.

Gift and gratuity rule

Decline gifts of value beyond the token limit and record any accepted gift in a register. This protects impartiality and the reputation of the security function.