SSP Legal & Ethical Compliance 2 — Questions and Answers
Question 1: Under the Americans with Disabilities Act (ADA), what must security personnel consider when detaining a person who appears impaired?
- The person may have a disability rather than be intoxicated (Correct answer)
- Disabilities are not covered during security incidents
- ADA exemptions apply when public safety is threatened
- Security personnel are exempt from ADA compliance
Correct answer: The person may have a disability rather than be intoxicated
Security personnel must consider that apparent impairment may be a disability such as epilepsy or diabetes, and act accordingly to avoid ADA violations.
Question 2: Which federal law establishes the primary framework for protecting classified national security information?
- Freedom of Information Act (FOIA)
- Executive Order 13526 (Correct answer)
- Privacy Act of 1974
- Federal Records Act
Correct answer: Executive Order 13526
Executive Order 13526 establishes the current framework for classifying, safeguarding, and declassifying national security information.
Question 3: A security officer discovers a colleague falsifying incident reports. The ethical obligation is to:
- Confront the colleague privately and allow self-correction
- Report the misconduct through proper channels immediately (Correct answer)
- Document it personally but take no further action
- Ignore it unless directly asked by management
Correct answer: Report the misconduct through proper channels immediately
Ethical compliance requires reporting misconduct through proper channels to maintain integrity and organizational accountability.
Question 4: What legal doctrine allows security personnel to use force in defense of a third party?
- Doctrine of transferred intent
- Defense of others (Correct answer)
- Sovereign immunity
- Respondeat superior
Correct answer: Defense of others
The defense of others doctrine legally permits a person to use reasonable force to protect another individual from imminent harm.
Question 5: The Foreign Corrupt Practices Act (FCPA) is most relevant to security practitioners who:
- Work in domestic retail environments
- Manage international operations or vendors (Correct answer)
- Handle cybersecurity investigations
- Oversee physical access control only
Correct answer: Manage international operations or vendors
The FCPA prohibits bribery of foreign officials and applies to security practitioners managing international operations or third-party relationships.
Question 6: Which standard governs the handling and protection of cardholder data in payment card environments?
- ISO 27001
- PCI DSS (Correct answer)
- HIPAA Security Rule
- SOX Section 404
Correct answer: PCI DSS
The Payment Card Industry Data Security Standard (PCI DSS) sets requirements for organizations that handle cardholder data.
Question 7: When a security director discovers that company practices violate OSHA regulations, the first step should be to:
- File a complaint directly with OSHA before notifying management
- Document findings and report to management for remediation (Correct answer)
- Ignore it if no incidents have occurred yet
- Advise employees to refuse unsafe work immediately
Correct answer: Document findings and report to management for remediation
The proper sequence is to document violations and report to management so corrective action can be taken through internal channels first.
SSP Legal & Ethical Compliance 2
Under the Americans with Disabilities Act (ADA), what must security personnel consider when detaining a person who appears impaired?