BOMA BOMA Security & Access Control 2 — Questions and Answers
Question 1: What is 'tailgating' or 'piggybacking' in building security and how is it prevented?
- Unauthorized tracking of employee movements using GPS; prevented by privacy policies
- An unauthorized person following an authorized person through a secured door; prevented by mantraps, turnstiles, and security awareness (Correct answer)
- A social engineering attack via email; prevented by phishing training
- Vehicles following authorized vehicles into secured parking; prevented by barrier gates
Correct answer: An unauthorized person following an authorized person through a secured door; prevented by mantraps, turnstiles, and security awareness
Tailgating occurs when an unauthorized person follows an authorized person through an access-controlled door without presenting their own credentials; it is prevented by security vestibules (mantraps), turnstiles, security cameras, and employee training.
Question 2: What does a 'security post order' provide to security personnel in commercial buildings?
- The security company's billing orders for the building owner
- Detailed written instructions defining duties, procedures, authority, and expected behaviors for security staff at a specific post (Correct answer)
- A priority ranking of tenants who receive security assistance first during emergencies
- Work orders for installing new security equipment requested by tenants
Correct answer: Detailed written instructions defining duties, procedures, authority, and expected behaviors for security staff at a specific post
Post orders are the security officer's primary reference document, specifying all duties, procedures, escalation steps, prohibited actions, and performance expectations for their specific assignment.
Question 3: What is 'video surveillance' primarily used for in commercial building security programs?
- Monitoring employee productivity for building tenant companies
- Deterring criminal activity, documenting incidents, and providing evidence for investigations and liability protection (Correct answer)
- Tracking customer foot traffic patterns for retail tenants
- Ensuring building staff perform their duties as required by management
Correct answer: Deterring criminal activity, documenting incidents, and providing evidence for investigations and liability protection
CCTV systems deter crime through the perception of being observed, provide real-time monitoring capabilities, create evidentiary records of incidents, and protect building owners from fraudulent liability claims.
Question 4: What is 'social engineering' in the context of building security threats?
- Community building programs designed to create positive tenant relationships
- Manipulating people through deception to gain unauthorized access or sensitive information (Correct answer)
- Security training programs that use social learning techniques for staff development
- Installing social amenity spaces to naturally increase legitimate building activity and deter crime
Correct answer: Manipulating people through deception to gain unauthorized access or sensitive information
Social engineering exploits human psychology rather than technical vulnerabilities, using deception, pretexting, or impersonation to manipulate people into granting access, revealing credentials, or bypassing security procedures.
Question 5: What is the proper protocol for a commercial building security officer encountering a suspicious unattended package?
- Open the package to determine if it poses a threat before calling authorities
- Do not touch the package, clear the area, and immediately notify building management and emergency services (Correct answer)
- Move the package to a secure room and notify building management
- Take a photograph for records and continue regular patrols unless the package is still there after an hour
Correct answer: Do not touch the package, clear the area, and immediately notify building management and emergency services
Suspicious packages should never be touched or moved as this could trigger a device or spread hazardous material; the correct response is to clear the surrounding area and immediately contact building management and call 911.
Question 6: What does an 'after-hours access policy' for commercial buildings typically require?
- Prohibiting all after-hours access for security and liability reasons
- Written tenant authorization for specific individuals, verified credentials, and logged access for all non-business-hours entry (Correct answer)
- Universal access for all current tenants to any part of the building at any time
- After-hours access only through the building management company's escort service
Correct answer: Written tenant authorization for specific individuals, verified credentials, and logged access for all non-business-hours entry
After-hours access policies balance tenant operational needs with security by requiring advance authorization, credential verification, and detailed logging of all persons entering during non-standard hours.
BOMA BOMA Security & Access Control 2
What is 'tailgating' or 'piggybacking' in building security and how is it prevented?