SIA Security Guard Exam — Questions and Answers

Question 1: When writing a report, should a security guard include their personal opinions?

Yes — but only if they are negative
No — reports should contain only factual, objective observations and not personal opinions or assumptions (Correct answer)
Yes — their opinion is the most important part
Only if the client requests it

Correct answer: No — reports should contain only factual, objective observations and not personal opinions or assumptions

Reports must be factual and objective. Write what you saw, heard, and did — not what you think happened or why. Personal opinions, assumptions, and conclusions can undermine the report's credibility in court.

Question 2: How should descriptions of people be written in a security report?

Using nicknames or slang
Using objective, factual descriptors: approximate age, height, build, hair colour, clothing, and distinguishing features (Correct answer)
Just stating their ethnicity
Using vague descriptions like 'suspicious-looking'

Correct answer: Using objective, factual descriptors: approximate age, height, build, hair colour, clothing, and distinguishing features

Descriptions should be objective and factual: approximate age, height, build, hair colour and style, clothing (top to bottom), footwear, and any distinguishing features such as tattoos, scars, or glasses.

Question 3: What is a 'biometric' access control system?

A system that reads barcodes
A system that uses keypads
A system using traditional keys
A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition (Correct answer)

Correct answer: A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition

Biometric systems use unique physical characteristics to verify identity — such as fingerprints, iris patterns, facial geometry, or hand geometry. They are highly secure because biological features cannot be easily shared or duplicated.

Question 4: What is the primary purpose of access control in a security context?

To make entry as difficult as possible for everyone
To count the number of people in a building
To ensure that only authorised persons can enter specific areas while preventing unauthorised access (Correct answer)
To provide directions to visitors

Correct answer: To ensure that only authorised persons can enter specific areas while preventing unauthorised access

Access control manages who can enter specific areas, ensuring only authorised personnel gain access while preventing unauthorised entry. It is a fundamental principle of physical security.

Question 5: What is the purpose of a 'key control register' in a security guard's documentation responsibilities?

To schedule when locks should be changed
To maintain a formal record of all keys issued and returned — including who received each key, when it was issued, and when it was returned — preventing unauthorised key duplication or loss (Correct answer)
To list all security guards who are authorised to carry keys
To record all keys in existence in the country

Correct answer: To maintain a formal record of all keys issued and returned — including who received each key, when it was issued, and when it was returned — preventing unauthorised key duplication or loss

A key control register provides accountability for all keys. By recording who takes which key and when it is returned, it detects loss or failure to return keys, supports investigation of unauthorised access, and maintains security of locked areas.

Question 6: What is a 'mantrap' or 'airlock' entry system?

A ventilation system for cleanrooms
A two-door entry system where the first door must close before the second will open, preventing tailgating (Correct answer)
An emergency exit mechanism
A trap for catching intruders

Correct answer: A two-door entry system where the first door must close before the second will open, preventing tailgating

A mantrap (or airlock) uses two interlocking doors — the first must close completely before the second will open. Only one person can enter the space between doors, effectively preventing tailgating.

Question 7: What makes a security report admissible as evidence in court?

Being typed on official paper
Being long and detailed
Being signed by a solicitor
Being factual, contemporaneous, legible, objective, and made by the person who witnessed the events (Correct answer)

Correct answer: Being factual, contemporaneous, legible, objective, and made by the person who witnessed the events

For a report to be admissible as evidence, it should be: factual (not opinion), made contemporaneously (at the time), legible, objective, written by the person who witnessed the events, and free from alterations or corrections that could suggest tampering.

Question 8: What are the three categories of access control measures?

Physical, electronic, and procedural (Correct answer)
Permanent, temporary, and emergency
Cheap, moderate, and expensive
Simple, medium, and complex

Correct answer: Physical, electronic, and procedural

Access control uses three categories: Physical (locks, barriers, fences), Electronic (card readers, biometrics, keypads), and Procedural (visitor policies, sign-in procedures, escort requirements).

Question 9: Why is accurate report writing important for security guards?

To improve their English skills
To fill time during quiet periods
Only to satisfy the client
Reports may be used as evidence in court, for insurance claims, internal investigations, and to demonstrate due diligence (Correct answer)

Correct answer: Reports may be used as evidence in court, for insurance claims, internal investigations, and to demonstrate due diligence

Security reports may be used as legal evidence, form the basis of insurance claims, support internal investigations, demonstrate compliance with procedures, and provide a historical record of incidents.

Question 10: What is 'tailgating' in access control?

When an unauthorised person follows an authorised person through a secure entry point without presenting their own credentials (Correct answer)
Following a vehicle too closely
Parking too close to the building entrance
A type of social event

Correct answer: When an unauthorised person follows an authorised person through a secure entry point without presenting their own credentials

Tailgating (or 'piggybacking') occurs when an unauthorised person follows closely behind an authorised person through a controlled entry point, bypassing the access control system.

Question 11: What is a 'key holding' service in security?

A key cutting service
A locksmith service
A service where the security company holds keys to premises and responds to alarm activations out of hours (Correct answer)
A service for making spare keys

Correct answer: A service where the security company holds keys to premises and responds to alarm activations out of hours

Key holding is a service where the security company securely holds keys to a client's premises and responds when alarms are activated outside business hours, including securing the premises if necessary.

Question 12: What is the difference between 'static' and 'mobile' security patrols?

Static guards work days; mobile guards work nights
Static guards stand still; mobile guards walk
There is no difference
Static guards remain at one location; mobile patrols travel between multiple sites in a vehicle (Correct answer)

Correct answer: Static guards remain at one location; mobile patrols travel between multiple sites in a vehicle

Static guards are assigned to one location for their shift, maintaining a continuous presence. Mobile patrols travel between multiple locations in a vehicle, making scheduled or random checks at each site.

Question 13: Why is it important to issue and manage visitor passes or badges?

To collect personal data
To make visitors feel welcome
To advertise the security company
To easily identify who is a visitor, ensure they are accounted for, and control their access to appropriate areas (Correct answer)

Correct answer: To easily identify who is a visitor, ensure they are accounted for, and control their access to appropriate areas

Visitor passes serve multiple security purposes: they identify the wearer as a visitor (not staff), indicate which areas they may access, show if they should be escorted, and help ensure all visitors have signed out when they leave.

Question 14: What should a security guard do when a delivery driver arrives at a controlled access point?

Wave them through immediately
Refuse all deliveries
Let them find their own way around
Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point (Correct answer)

Correct answer: Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point

The guard should verify the driver's identity and the delivery details, check with the relevant person that the delivery is expected, log the driver's details, issue a temporary pass, and direct them to the correct delivery area.

Question 15: What does 'defence in depth' mean in the context of access control?

Having very deep foundations
Defending the building's deepest point
Only protecting underground areas
Using multiple layers of security measures so that if one layer fails, others still provide protection (Correct answer)

Correct answer: Using multiple layers of security measures so that if one layer fails, others still provide protection

Defence in depth means implementing multiple layers of security — perimeter fencing, CCTV, patrols, access control, intruder alarms, etc. If one layer is breached, subsequent layers continue to provide protection.

Question 16: Why should a security guard vary their patrol times and routes?

To explore different parts of the building
To find shorter routes
To prevent potential offenders from predicting their movements and exploiting gaps in coverage (Correct answer)
To avoid boredom

Correct answer: To prevent potential offenders from predicting their movements and exploiting gaps in coverage

Varying patrol times and routes makes the guard's movements unpredictable, preventing potential offenders from timing their activities to avoid detection.

Question 17: Why is effective communication important between a security guard and the control room?

To arrange social events
To ensure real-time situational awareness, coordinate responses, and maintain a record of events (Correct answer)
To pass the time during quiet periods
To check on the weather forecast

Correct answer: To ensure real-time situational awareness, coordinate responses, and maintain a record of events

Regular communication with the control room ensures situational awareness, enables coordinated responses to incidents, provides welfare checks for lone workers, and creates an auditable record of the guard's activities.

Question 18: What is the difference between a 'statement' and an 'incident report'?

There is no difference
A statement is always handwritten
An incident report is an internal record for the company; a statement is a formal document for police or legal proceedings (Correct answer)
An incident report is longer

Correct answer: An incident report is an internal record for the company; a statement is a formal document for police or legal proceedings

An incident report is an internal document used by the security company and client. A statement (or witness statement) is a formal legal document, usually made for the police, that may be used as evidence in court.

Question 19: What does CCTV observation of a person exhibiting 'suspicious behaviour' near an ATM machine suggest, and what should a security guard do?

Approach and question the person immediately
The person may be planning to skim cards, rob users, or conduct surveillance for a later crime. The guard should observe and document the behaviour, report to colleagues, alert police if the behaviour escalates, and be visible to act as a deterrent (Correct answer)
File a report at the end of the shift only
Nothing — standing near an ATM is normal behaviour

Correct answer: The person may be planning to skim cards, rob users, or conduct surveillance for a later crime. The guard should observe and document the behaviour, report to colleagues, alert police if the behaviour escalates, and be visible to act as a deterrent

Suspicious behaviour at an ATM (loitering, watching users, repeatedly approaching and leaving, installing devices) may indicate card skimming, robbery planning, or distraction theft. The guard should monitor and document the behaviour, maintain a visible presence as a deterrent, and contact police if the risk escalates.

Question 20: What is the 'five Ws' approach to gathering information about a security incident?

Walk, Watch, Wait, Warn, Write
Width, Weight, Wound, Warrant, Witness
Who, What, Where, When, Why (Correct answer)
Witness, Weapon, Weather, Warning, Written

Correct answer: Who, What, Where, When, Why

The five Ws — Who, What, Where, When, Why (and sometimes How) — provide a structured approach to gathering and recording all essential information about a security incident.

Question 21: What information should a visitor log or register typically contain?

Just a signature
Only the visitor's name
Name, company, person visiting, arrival time, departure time, car registration, and badge number issued (Correct answer)
Only the time of arrival

Correct answer: Name, company, person visiting, arrival time, departure time, car registration, and badge number issued

A comprehensive visitor log records: full name, company/organisation, person being visited, purpose of visit, arrival and departure times, vehicle registration, identification shown, and any visitor pass/badge number issued.

Question 22: Can a security guard detain (hold without arresting) a person they suspect of shoplifting on behalf of the store?

Yes, but only if the store has a contractual arrangement granting this right, and even then the grounds must justify it; detention must be brief and the person must be told why they are being detained, with police called promptly (Correct answer)
Yes — any security guard can detain anyone they suspect of any offence for up to 2 hours
No — only police can detain anyone
Yes — SIA licensees have a statutory right to detain suspects for 30 minutes

Correct answer: Yes, but only if the store has a contractual arrangement granting this right, and even then the grounds must justify it; detention must be brief and the person must be told why they are being detained, with police called promptly

Security guards have no general statutory power to detain. However, in retail environments, the store owner's property rights and the law of trespass (combined with the citizen's arrest power where applicable) can justify brief detention of a suspected shoplifter. The detention must be brief, communicated, and promptly resolved by handing to police.

Question 23: What is 'vicarious liability' and how does it relate to security companies?

When a guard is liable for their colleague's mistakes
When an employer is held legally responsible for the actions of their employees carried out during the course of their employment (Correct answer)
When the police are liable for security incidents
When a client is liable for the security guard's actions

Correct answer: When an employer is held legally responsible for the actions of their employees carried out during the course of their employment

Vicarious liability means an employer can be held legally responsible for wrongful actions committed by their employees during the course of employment. This is why security companies must train, supervise, and manage their staff properly.

Question 24: What is an 'assignment instruction' in security guarding?

A document detailing the specific duties, procedures, and post orders for a particular security site (Correct answer)
A disciplinary notice
A training manual for new guards
A job application form

Correct answer: A document detailing the specific duties, procedures, and post orders for a particular security site

Assignment instructions (also called post orders) are site-specific documents that detail the security guard's duties, responsibilities, patrol routes, emergency procedures, key contacts, and site-specific information.

Question 25: Why should a security guard use the 24-hour clock when writing reports?

It eliminates confusion between AM and PM times and is the standard used by emergency services (Correct answer)
It looks more professional
It is required by law
It takes up less space on the page

Correct answer: It eliminates confusion between AM and PM times and is the standard used by emergency services

The 24-hour clock eliminates ambiguity between AM and PM (e.g., 0800 vs 2000), aligns with emergency services and military time standards, and ensures precision in legal documents and evidence.

Question 26: What is a 'Section 5 Public Order Act 1986' offence and how is it relevant to a security guard's role?

Using or threatening violence — relevant when a security guard needs to arrest someone
Trespassing on private property
Using threatening, abusive, or insulting words or behaviour (or displaying such material) within the hearing or sight of a person likely to be harassed, alarmed, or distressed — security guards must avoid this and may witness or report it (Correct answer)
Operating without an SIA licence

Correct answer: Using threatening, abusive, or insulting words or behaviour (or displaying such material) within the hearing or sight of a person likely to be harassed, alarmed, or distressed — security guards must avoid this and may witness or report it

Section 5 of the Public Order Act 1986 makes it an offence to use threatening or abusive words or behaviour within the hearing or sight of a person likely to be harassed, alarmed, or distressed. Security guards must avoid this conduct themselves and may need to report or manage situations involving this offence.

Question 27: What is the purpose of a 'sign-out' procedure for visitors?

To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site (Correct answer)
To remind them to come again
To collect feedback about their visit
To say goodbye politely

Correct answer: To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site

The sign-out procedure ensures all visitors are accounted for (critical during evacuations), retrieves and deactivates visitor passes, records departure times, and maintains an accurate record of who is currently on site.

Question 28: What is a 'dynamic risk assessment' and when should a security guard conduct one?

A continuous, real-time mental assessment of potential hazards and risks as a situation develops, allowing the security guard to adapt their response as circumstances change (Correct answer)
A formal written risk assessment completed before each shift
An assessment conducted only by a supervisor
A weekly review of security procedures

Correct answer: A continuous, real-time mental assessment of potential hazards and risks as a situation develops, allowing the security guard to adapt their response as circumstances change

Dynamic risk assessment is the ongoing mental process of spotting hazards, assessing risks, and deciding on appropriate action as a situation unfolds in real time. Security guards should conduct this continuously during their duties, especially when approaching or involved in any developing incident.

Question 29: What is a 'guard tour system' and what is its purpose?

A GPS navigation device for mobile patrols
A tourism guide for security guards
An electronic system that records when and where a guard has patrolled, providing proof that checks have been completed (Correct answer)
A guard's personal fitness tracker

Correct answer: An electronic system that records when and where a guard has patrolled, providing proof that checks have been completed

A guard tour system uses checkpoints (electronic tags, QR codes, or NFC points) placed around the site that the guard scans during patrols. It creates an audit trail proving patrols were completed at the correct times.

Question 30: What is the correct approach to correcting a mistake in a handwritten security report?

Use correction fluid (white-out) to cover the mistake
Scribble over the mistake until it is unreadable
Tear out the page and rewrite it
Draw a single line through the error, write the correction nearby, initial and date the amendment (Correct answer)

Correct answer: Draw a single line through the error, write the correction nearby, initial and date the amendment

Draw a single line through the error (so the original text remains readable), write the correction clearly nearby, and initial and date the amendment. This maintains the integrity of the document.

Question 31: What is 'lone working' and what risks does it present for security guards?

Working on a single-storey building
Working alone without direct supervision, which presents risks including confrontation, medical emergencies, and delayed assistance (Correct answer)
Working for only one security company
Working with only one client

Correct answer: Working alone without direct supervision, which presents risks including confrontation, medical emergencies, and delayed assistance

Lone working means working alone without colleagues nearby. Risks include: confrontation without backup, medical emergencies with no one to help, vulnerability to attack, and delayed response from emergency services.

Question 32: A security guard finds a person who appears to have committed theft on private premises. Under what circumstances is it lawful to use force to detain them?

Only if the item stolen exceeds £200 in value
Any time a security guard suspects theft
Only where a citizen's arrest under s.24A PACE is lawfully made — the offence must be indictable, a constable must not be reasonably available, and the detention must be necessary to prevent escape, harm, or loss of evidence (Correct answer)
Force can always be used to detain shoplifters as a matter of retail security custom

Correct answer: Only where a citizen's arrest under s.24A PACE is lawfully made — the offence must be indictable, a constable must not be reasonably available, and the detention must be necessary to prevent escape, harm, or loss of evidence

Force to detain a person is only lawful when a legitimate citizen's arrest under s.24A PACE is being made (or common law self-defence/prevention of crime applies). Detaining someone with force outside these circumstances constitutes false imprisonment and potentially assault.

Question 33: What key information should be included in a security incident report?

Just the name of the person responsible
Date, time, location, persons involved, description of the incident, actions taken, witnesses, and the outcome (Correct answer)
Only information the police request
Only the guard's opinion of what happened

Correct answer: Date, time, location, persons involved, description of the incident, actions taken, witnesses, and the outcome

A comprehensive incident report includes: date, time, location, persons involved (descriptions if names unknown), factual account of what happened, actions taken, use of force (if any), witnesses, evidence preserved, and the outcome.

Question 34: What is 'professional scepticism' in the context of a security guard's role?

Doubting all instructions from management
Documenting every interaction with excessive detail
A professional mindset of questioning and critical evaluation — not accepting situations at face value, remaining alert to manipulation, social engineering, or deception, while treating people with respect (Correct answer)
Refusing to believe any information provided by the public

Correct answer: A professional mindset of questioning and critical evaluation — not accepting situations at face value, remaining alert to manipulation, social engineering, or deception, while treating people with respect

Professional scepticism means maintaining a questioning mindset — being aware that situations may not be as they appear, that people may attempt to deceive or manipulate security staff, and remaining alert to anomalies. It is balanced with treating people with fairness and respect.

Question 35: What is the correct procedure for a security guard discovering a health and safety hazard?

Ignore it — it's not their responsibility
Make the area safe if possible, report the hazard to the site manager and log it in the incident book (Correct answer)
Fix it themselves regardless of qualification
Only report it if someone gets injured

Correct answer: Make the area safe if possible, report the hazard to the site manager and log it in the incident book

The guard should take immediate steps to make the area safe (e.g., cordon off a wet floor), report the hazard to the site manager or facilities team, and document it in the incident log. Do not attempt repairs you are not qualified for.

Question 36: What is 'social engineering' in the context of access control?

Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure (Correct answer)
A type of civil engineering
Designing social spaces in buildings
Building social housing

Correct answer: Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure

Social engineering exploits human psychology rather than technical vulnerabilities. Examples include impersonating contractors, pretending to be from IT support, or creating a fake emergency to bypass security procedures.

Question 37: Under which Act must security guards hold a valid SIA licence?

The Security Services Act 1996
The Employment Rights Act 1996
The Health and Safety at Work Act 1974
The Private Security Industry Act 2001 (Correct answer)

Correct answer: The Private Security Industry Act 2001

The Private Security Industry Act 2001 established the Security Industry Authority (SIA) and made it a legal requirement for individuals working in licensable sectors of the private security industry to hold a valid SIA licence.

Question 38: What is the primary purpose of a security patrol?

To deter criminal activity, detect security breaches, and monitor the condition of the premises (Correct answer)
To socialise with other staff
To get exercise during the shift
To check personal messages on a mobile phone

Correct answer: To deter criminal activity, detect security breaches, and monitor the condition of the premises

Security patrols serve multiple purposes: deterring criminal activity through visible presence, detecting breaches or vulnerabilities, checking the condition of the premises, and identifying hazards.

Question 39: What does 'IIMARCH' stand for in security reporting?

Initial, Immediate, Medical, Ambulance, Recovery, Check, Hospital
It is not a real acronym
Information, Intention, Method, Administration, Risk assessment, Communications, Human rights (Correct answer)
Incident, Investigation, Management, Analysis, Report, Communication, Handover

Correct answer: Information, Intention, Method, Administration, Risk assessment, Communications, Human rights

IIMARCH is a briefing and reporting structure: Information (what happened), Intention (what you plan to do), Method (how you will do it), Administration (logistics), Risk assessment, Communications (how to communicate), and Human rights (consider rights of those involved).

Question 40: What power does a security guard have when asked by a police officer to assist in making an arrest?

A security guard can only assist if they hold a specialist SIA licence
A security guard can assist a police officer in making an arrest when asked, using reasonable force, relying on s.3 of the Criminal Law Act 1967 (reasonable force for lawful arrest) and the duty to assist a constable (Correct answer)
None — only sworn police officers can make arrests
A security guard must refuse to assist in any arrest

Correct answer: A security guard can assist a police officer in making an arrest when asked, using reasonable force, relying on s.3 of the Criminal Law Act 1967 (reasonable force for lawful arrest) and the duty to assist a constable

Any citizen, including a security guard, can assist a police officer in making a lawful arrest when invited to do so. The authority comes from s.3 Criminal Law Act 1967 (reasonable force for lawful arrest) and the common law duty to assist an officer. The force used must still be reasonable.

Question 41: What should a security guard do if they encounter an intruder on site?

Observe from a safe distance, note their description, do not confront, call the police, and report to the control room (Correct answer)
Ask them politely to leave and then forget about it
Chase and physically restrain them
Ignore them if they are not causing damage

Correct answer: Observe from a safe distance, note their description, do not confront, call the police, and report to the control room

Personal safety is paramount. Observe the intruder from a safe distance, note their description, direction of travel, and any vehicle details. Do not confront them — call the police and report to the control room.

Question 42: How should a security guard describe actions in a report — past tense or present tense?

Future tense
Past tense, as the report describes events that have already occurred (Correct answer)
Present tense always
Any tense is acceptable

Correct answer: Past tense, as the report describes events that have already occurred

Reports should be written in the past tense because they describe events that have already happened. For example: 'I observed a male individual enter the car park at 2230 hrs' — not 'I observe'.

Question 43: What are the three elements of the 'fire triangle'?

Electricity, gas, and wood
Smoke, flame, and ash
Water, earth, and air
Heat, fuel, and oxygen (Correct answer)

Correct answer: Heat, fuel, and oxygen

The fire triangle consists of heat (ignition source), fuel (combustible material), and oxygen. A fire needs all three elements to start and sustain itself. Removing any one element extinguishes the fire.

Question 44: What does 'contemporaneous' mean in relation to note-taking?

Notes that are typed rather than handwritten
Notes made at the time of or as soon as reasonably practicable after the event (Correct answer)
Written in modern English
Notes shared with contemporary colleagues

Correct answer: Notes made at the time of or as soon as reasonably practicable after the event

Contemporaneous notes are made at the time of the event or as soon as possible afterwards. Courts give greater weight to contemporaneous notes because they are made when the events are fresh in the writer's memory.

SIA Security Guard Exam

The SIA Security Guard Exam is the licensing test for security personnel in the UK, assessing knowledge of security procedures, access control, report writing, and fire safety as required by the Security Industry Authority.

Questions

75 min

Time Limit

74%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

assets.publishing.service.gov.uk — Passing score, exam information · verified Oct 2026
regulated-professions.service.gov.uk — Score validity · verified Oct 2026
gov.uk — Registration, eligibility, fees, test delivery, renewal, exam information · verified Oct 2026