Incident Response via CCTV

What is the primary role of CCTV in incident response?

• ATo arrest suspects
• BTo identify suspicious behaviour and provide information to support security response✓
• CTo replace on-site security staff
• DTo intimidate people

Answer: CCTV identifies threats and provides information to support coordinated security and emergency response.

What are 'suspicious behavioural indicators' that a CCTV operator should watch for?

• AAnyone moving slowly
• BRepeated circling, loitering in unusual areas, checking exits, or photographing locations✓
• CPeople standing still
• DAll visitors without exception

Answer: Key suspicious indicators include reconnaissance behaviour, unusual loitering, checking exits, and pre-placement of items.

If a CCTV operator observes someone placing a suspicious package, what should they do immediately?

• AInvestigate alone
• BDelete the footage
• CReport to supervisor/security and follow evacuation/emergency procedures✓
• DContinue monitoring without action

Answer: A suspicious package is a critical security threat requiring immediate escalation and emergency response.

What should be documented when an operator observes suspicious activity?

• ANothing - just remember it
• BDate, time, location, description of activity, persons involved, and actions taken✓
• COnly the incident time
• DOnly personnel descriptions

Answer: Detailed incident logs are essential for investigations and creating a factual record.

When coordinating with on-site security staff about a potential incident, what information is most useful?

• AJust the suspect's appearance
• BReal-time location, direction of movement, actions, and current activity observed on camera✓
• COnly a general description
• DNo information - let them find it

Answer: Real-time tactical information (location, movement, actions) enables effective on-site response.

What is 'situational awareness' for a CCTV operator?

• AAwareness of own physical surroundings only
• BUnderstanding of the full monitored scene, potential threats, escape routes, and tactical context✓
• CCamera settings only
• DEquipment maintenance needs

Answer: Situational awareness means understanding the overall environment, threats, and tactical context.

How should a CCTV operator track a suspect leaving the building after a security incident?

• AStop monitoring
• BFollow through external cameras if available, and provide real-time descriptions to response teams✓
• CDelete the footage immediately
• DSwitch to another camera

Answer: Continuing to track suspects and providing real-time updates supports investigation and apprehension.

What should an operator do if they suspect a staff member is engaging in theft or security breach?

• AImmediately confront them
• BDocument observations and follow company reporting procedures to management/security✓
• CTell colleagues
• DAssume it's innocent and ignore

Answer: Internal security concerns must be reported through proper channels, not confronted directly.

When documenting an incident in the CCTV control room log, what is the critical omission to avoid?

• ADescribing the incident
• BRecording the exact time
• CMaking subjective judgments or accusations without facts✓
• DNoting the camera numbers

Answer: Incident logs should record observable facts, not assumptions or accusations. Objectivity is essential.

What is 'loitering' in the context of suspicious behaviour detection?

• AWalking normally through an area
• BRemaining in an area without clear purpose for an unusual period✓
• CStanding still
• DWorking at a location

Answer: Loitering means lingering without clear purpose - suspicious if prolonged in restricted or unusual areas.

How should an operator respond to a genuine emergency (e.g., fire alarm) detected via CCTV?

• AContinue monitoring only
• BImmediately alert on-site staff and follow emergency procedures while continuing to document✓
• CEvacuate immediately without alerting others
• DTurn off the system

Answer: Emergencies require immediate notification and following established protocols while maintaining monitoring.

What is 'coordinated reconnaissance'?

• ANormal scouting by legitimate people
• BMultiple individuals systematically observing exits, cameras, and security measures - a sign of planning✓
• CStaff briefing
• DRegular maintenance checks

Answer: Coordinated reconnaissance by multiple individuals suggests pre-planning of illegal activity.