CSS CSS Security Investigations & Reporting

Question 1

What is the most important characteristic of a well-written security incident report?

Accepted Answer

It is accurate, factual, objective, complete, and written in clear language

Answer

It contains the officer's personal opinions and theories about who is responsible

Answer

It is as brief as possible with minimal detail

Answer

It is written several days after the incident while memories are clearer

Question 2

Which of the following best describes the chain of custody in a security investigation?

Accepted Answer

A documented record of who collected, handled, and transferred evidence to ensure its integrity

Answer

The chain of command for security officer supervision

Answer

The order in which witnesses are interviewed

Answer

The sequence of alarm responses by officers

Question 3

When collecting evidence at a scene, a security officer should:

Accepted Answer

Photograph the scene before touching anything and use gloves or tools when collecting physical evidence

Answer

Handle evidence with bare hands to examine it more closely

Answer

Remove all evidence immediately to secure storage

Answer

Allow bystanders to observe and photograph the evidence

Question 4

A security supervisor is investigating an allegation of employee theft. Which is the most appropriate first step?

Accepted Answer

Review available evidence such as access logs and CCTV footage before interviewing the employee

Answer

Publicly accuse the employee in a staff meeting

Answer

Terminate the employee based on the allegation alone

Answer

Report directly to media before completing the investigation

Question 5

The five Ws that should be answered in every security incident report are:

Accepted Answer

Who, What, When, Where, Why (and How)

Answer

Watch, Wait, Walk, Warn, Write

Answer

Witness, Warrant, Weapon, Weather, Wound

Answer

Warning, Watch, Work, Write, Withdraw

Question 6

Why should a security officer avoid using jargon or abbreviations in a formal incident report?

Accepted Answer

Jargon and abbreviations may be misunderstood by investigators, attorneys, or courts who read the report

Answer

Reports are only read by officers who understand security terminology

Answer

Formal reports require technical language to appear professional

Answer

Abbreviations save space and make reports shorter