SIA CP Surveillance Detection & Counter-Surveillance 1 — Questions and Answers
Question 1: What is the primary purpose of surveillance detection in a CP operation?
- To identify persons conducting surveillance on the principal before they can plan an attack (Correct answer)
- To conduct surveillance on potential threats
- To monitor the principal's own movements for pattern analysis
- To detect police surveillance of the principal
Correct answer: To identify persons conducting surveillance on the principal before they can plan an attack
Surveillance detection aims to identify when someone is watching the principal, gathering intelligence for a potential attack, enabling the CP team to take protective action early.
Question 2: What does 'SDR' stand for in a surveillance detection context?
- Surveillance Detection Route (Correct answer)
- Security Deployment Record
- Standard Defence Response
- Surveillance Data Report
Correct answer: Surveillance Detection Route
An SDR (Surveillance Detection Route) is a route specifically designed to expose surveillance by allowing the CP team to observe if anyone is following or monitoring the principal.
Question 3: What is 'trigger' in surveillance detection terminology?
- A person or position that initiates surveillance of the principal at a specific point (Correct answer)
- The moment a threat actor decides to attack
- A radio codeword for an immediate threat
- A device used to detect hidden cameras
Correct answer: A person or position that initiates surveillance of the principal at a specific point
A trigger is a surveillance team member stationed at a fixed point who initiates coverage when the principal moves, signalling other surveillance team members to begin following.
Question 4: What is 'counter-surveillance' (CS) and how does it differ from surveillance detection?
- CS involves the CP team actively watching for and disrupting surveillance; detection identifies that surveillance is occurring whereas CS takes active steps to counter it (Correct answer)
- They are identical terms
- CS is conducted by police; detection by private security
- CS is conducted in vehicles; detection on foot
Correct answer: CS involves the CP team actively watching for and disrupting surveillance; detection identifies that surveillance is occurring whereas CS takes active steps to counter it
Surveillance detection identifies that the principal is being watched; counter-surveillance goes further by taking active steps — route changes, challenging observers, alerting police — to disrupt the surveillance.
Question 5: What are 'indicators of surveillance' that a CPO should look for?
- The same person appearing in multiple locations, eye contact avoidance, camera use near the principal and unusual loitering (Correct answer)
- Anyone wearing dark clothing
- Persons who do not applaud at events
- Customers who pay by cash
Correct answer: The same person appearing in multiple locations, eye contact avoidance, camera use near the principal and unusual loitering
Surveillance indicators include repeated sightings of the same person in different locations, use of cameras towards the principal, avoidance of eye contact and behaviour inconsistent with the environment.
Question 6: Why should a CPO vary the principal's routes and timings even when not under surveillance?
- To prevent attackers from building an accurate pattern of life through advance surveillance (Correct answer)
- To comply with traffic regulations
- To reduce travel costs
- To improve the principal's privacy
Correct answer: To prevent attackers from building an accurate pattern of life through advance surveillance
Routine predictability allows an attacker to plan around the principal's movements; regularly varying routes and times makes accurate prediction — and therefore attack planning — much harder.
What is the primary purpose of surveillance detection in a CP operation?