Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Name of Security Agency
Name of Assessor(s)
RESTRICTED
1
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Processes Category
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.1 Score System (max 6 pts) pt
Is there a systematic process to ensure that
Security Officers are aware of the Submitted 85% and above of the required number
6
functional duty they are employed for (pre- of documentation
employment)? Submitted 60% to <85% of the required number of
4
documentation
Documentation of pre-employment discussion Submitted 35% to <60% of the required number of
on job descriptions and responsibilities. 2
documentation
The numbers required are as follows: Submitted 0% to <35% of the required number of
0
documentation
Number of Assessor’s Observation
Number of Documentation
Security
required for submission
Officers
1 or 10% of total Security
1 – 100
Officers (whichever is higher)
11 or 8% of total Security
101 - 500
Officers (whichever is higher)
41 or 6% of total Security
501 - 2000
Officers (whichever is higher)
121 or 4% of total Security
> 2001
Officers (whichever is higher)
Total
RESTRICTED
2
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.2 Score System (max 6 pts) pt
Is there a systematic process to ensure that
Security Officers are aware of the Submitted 85% and above of the required number
6
functional duty they are employed for (pre- of documentation
promotion)?
Submitted 60% to <85% of the required number of
4
documentation
Documentation of pre-promotion briefing on
expanded job descriptions and additional Submitted 35% to <60% of the required number of
2
responsibilities. documentation
The numbers required are as follows: Submitted 0% to <35% of the required number of
0
documentation
Number of Assessor’s Observation
Number of Documentation
Security
required for submission
Officers
1 or 4% of total Security
1 – 100
Officers (whichever is higher)
5 or 3% of total Security
101 - 500
Officers (whichever is higher)
16 or 2% of total Security
501 - 2000
Officers (whichever is higher)
41 or 1% of total Security
> 2001
Officers (whichever is higher)
Total
RESTRICTED
3
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.3 Score System (max 5 pts) pt
Is there a systematic process to ensure that
Security Officers are aware of their Submitted 70% and above of the required
5
functional duties at the sites they are documentation
deployed? Submitted 35% to <70% of the required
3
documentation
Past induction checklists for specific Submitted 0% to <35% of the required number of
0
deployment sites. documentation.
Assessor’s Observation
The numbers required are as follows:
Total
RESTRICTED
4
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.4 Score System (max 5 pts) pt
Is there a Standard Operating Procedure
(SOP) on Bomb Threat? SOP with all 5 specified components 5
The SOP must have the following components: No SOP or submitted SOP with <5 specified
0
1) Checklist for gathering more information components
when a bomb threat is received (e.g. Assessor’s Observation
received through telephone or text
messages)
2) Search procedure to confirm presence of
bomb
3) Calling the Police if a bomb or a
suspicious item is found
4) Evacuation procedures
5) Crowd control procedures
Total
RESTRICTED
5
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.5 Score System (max 5 pts) pt
Is there a Standard Operating Procedure
(SOP) on Fire Emergency? SOP with all 6 specified components 5
No SOP or submitted SOP with <6 specified
The SOP must have the following components: 0
components
1) Procedure to confirm presence of fire
Assessor’s Observation
2) Calling ‘995’
3) Activation of fire alarm to warn others
4) Procedure to fight the fire
5) Procedure for evacuation
6) Procedure for Crowd control
Total
RESTRICTED
6
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.6 Score System (max 5 pts) pt
Is there a Standard Operating Procedure
(SOP) to deal with suspicious persons, SOP with all 4 specified components 5
vehicles, activities and objects?
No SOP or submitted SOP with <4 specified
0
components
SOP on Dealing with Suspicious Persons,
Assessor’s Observation
Vehicles, Activities and Objects.
Total
RESTRICTED
7
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.7 Score System (max 5 pts) pt
Does the SA have an SOP for After Action
Review (AAR)? SOP with all 4 specified components 5
SOP for carrying out an AAR. No SOP or submitted SOP with <4 specified
0
components
The SOP must have the following components: Assessor’s Observation
1) What was supposed to happen
2) What actually happened
3) Why did it happen
4) How to prevent it from recurring
Total
1.1.8 Score System (max 8 pts) pt
Did the SA conduct AAR based on
occurrences of learning values at the Submitted 75% or more of the required
8
deployment sites during the period of documentation
assessment (1st June 2018 to 31st May Submitted 50% to <75% of the required
5
2019)? documentation
Submitted 25% to <50% of the required
2
Past AAR reports based on occurrences of documentation
learning values (E.g. actual incidents or near Submitted 0% to <25% of the required
0
misses) at the deployment sites. The numbers documentation
required are as follows: Assessor’s Observation
Number of
Number of AAR required
Deployment
for submission
Sites
1 or 10% of total sites
1 – 100
(whichever is higher)
11 or 10% of total sites
> 100
(whichever is higher)
Total
RESTRICTED
8
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.9 Score System (max 5 pts) pt
Does the SA have an established process
for conducting exercises to test the SOP with all 5 specified components 5
Security Officers’ response pursuant to the No SOP or submitted SOP with <5 specified
Bomb Threat SOP? 0
components
Assessor’s Observation
SOP for Planning a Bomb Threat Exercise.
Total
1.1.10 Score System (max 12 pts) pt
Did the SA conduct any Bomb Threat
2 Exercise Reports and both reports with all 5
Exercises during the assessment period 12
specified components
(1st June 2018 to 31st May 2019)?
1 Exercise Report with all 5 specified components 6
The SA must conduct at least 2 Bomb Threat
Exercises during the assessment period and No Exercise Report or Exercise Report (s) with <5
0
submit Exercise Reports for these 2 exercises. specified components
Assessor’s Observation
Each report must contain the following
components:
1) Exercise Objectives
2) Date/Time/Place of the exercise
3) Participants involved
4) Key Observations
5) Lessons Learnt
Total
RESTRICTED
9
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.11 Score System (max 5 pts) pt
Does the SA have an established process
for conducting exercises to test the SOP with all 5 specified components 5
Security Officers’ response pursuant to the
No SOP or submitted SOP with <5 specified
Fire Emergency SOP? 0
components
Assessor’s Observation
SOP for Planning a Fire Emergency Exercise.
Total
1.1.12
Score System (max 12 pts) pt
Did the SA conduct any Fire Emergency
Exercises during the assessment period 2 Exercise Reports and both reports with all 5
(1st June 2018 to 31st May 2019)? 12
specified components
The SA must conduct at least 2 Fire 1 Exercise Report with all 5 specified components 6
Emergency Exercises during the assessment No Exercise Report or Exercise Report (s) with <5
0
period and submit Exercise Reports for these 2 specified components
exercises. Assessor’s Observation
Total
RESTRICTED
10
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.13
Does the SA have an established process Score System (max 5 pts) pt
for conducting exercises to test the
Security Officers’ response pursuant to the SOP with all 5 specified components 5
Suspicious Persons, Vehicles, Activities No SOP or submitted SOP with <5 specified
and Objects SOP? 0
components
Assessor’s Observation
SOP for Planning a Suspicious Persons,
Vehicles, Activities and Objects Exercise.
Total
1.1.14 Score System (max 12 pts) pt
Did the SA conduct any Suspicious
Persons, Vehicles, Activities and Objects 2 Exercise Reports and both reports with all 5
12
Exercises during the assessment period specified components
(1st June 2018 to 31st May 2019)? 1 Exercise Report with all 5 specified components 6
No Exercise Report or Exercise Report (s) with <5
0
The SA must conduct at least 2 exercises specified components
pursuant to the SOP on dealing with Assessor’s Observation
Suspicious Persons, Vehicles, Activities and
Objects during the assessment period and
submit Exercise Reports for these 2 exercises.
Total
RESTRICTED
11
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.15 Score System (max 5 pts) pt
Is there an established process to conduct
Red Teaming exercises? SOP with all 5 specified components 5
No SOP or submitted SOP with <5 specified
SOP for Planning a Red Teaming Exercise. 0
components
Assessor’s Observation
The SOP must include the following
components:
1) Guideline for different type of exercise
(e.g. suspicious items, access control)
2) Execution of exercise (red teamer’s
approach)
3) Exercise safety
4) Contingency plan for real incident
occurring during exercise
5) Exercise evaluation/AAR
Total
1.1.16 Score System (max 12 pts) pt
Did the SA conduct any Red Teaming
Exercises during the assessment period 2 Exercise Reports and both reports with all 5
12
(1st June 2018 to 31st May 2019)? specified components
1 Exercise Report with all 5 specified components 6
The SA must conduct at least 2 Red Teaming No Exercise Report or Exercise Report (s) with <5
Exercises during the assessment period and 0
specified components
submit Exercise Reports for these 2 exercises. Assessor’s Observation
Each report must contain the following
components:
1) Exercise Objectives (specify Red
Teaming scenario)
2) Date/Time/Place of the exercise
3) Participants involved
4) Key observations
5) Lessons learnt
Total
RESTRICTED
12
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.17 Score System (max 5 pts) pt
Does the SA have an established process
to manage incident reporting?
SOP with all 3 specified components 5
SOP on Incident Reporting. No SOP or submitted SOP with <3 specified
0
components
The SOP must contain the following key Assessor’s Observation
components:
1) Guidelines to establish a range of severity
of incidents
2) A matrix to stipulate the corresponding
persons or parties to be informed based
on the severity of the incident
3) A format for reporting the incidents
containing the components below:
- What happened?
- When did it happen?
- Where did it happen?
- Who was involved?
- How did it happen?
- Why did it happen?
- Is there any security implication due to
the incident?
Total
1.1.18 Score System (max 6 pts) pts
Does the SA have an established format for
reporting of incidents during the period of 1 Incident Report with all 7 specified components 6
assessment (1st June 2018 to 31st May
2019)? No Incident Report or Incident Report with <7
0
specified components
The SA must submit at least 1 Incident Report Assessor’s Observation
during the assessment period for assessment.
Total
RESTRICTED
13
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.19 Score System (max 10 pts) pt
Are supervisory checks carried out on
Security Officers during the assessment Evidence showing one supervisory check was
period (1st June 2018 to 31st May 2019)? carried out once a month for 12 months from 1
10
Jun 2018 to 31 May 2019, and the dates tallied
Documents submitted must contain the with the roster
following:
Evidence showing one supervisory check was
Supervisory Check Roster for all 12
carried out once a month for at least 9 months
months of the assessment period. 8
from 1 Jun 2018 to 31 May 2019, and the dates
Evidence showing that supervisory checks
tallied with the roster
were conducted based on the Supervisory
Check Roster must be submitted. Evidence showing one supervisory check was
Examples of evidence are Occurrence carried out once a month for at least 5 months
Book, Supervisory Check Book, or any 4
from 1 Jun 2018 to 31 May 2019, and the dates
other documentary records. tallied with the roster
Total
1.1.20 Score System (max 5 pts) pt
Does the SA have a process to conduct a
security risk survey? SOP with all 5 specified components 5
SOP for conducting security risk survey. No SOP or submitted SOP with <5 specified
0
components
SOP must include the following components: Assessor’s Observation
1) General survey of the premises
2) Identification of all entry and exit points
3) Identification of critical assets within the
premises
4) Identification of risk areas
5) Recommendations to address or mitigate
the identified risk areas
Total
RESTRICTED
14
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
1.1.21 Score System (max 8 pts) pt
Was there any security risk survey
conducted during the period of assessment Submitted 75% or more of the required risk survey
8
(1st June 2018 to 31st May 2019)? reports
Submitted 50% to less than 75% of the required
6
There must be submission of past survey risk survey reports
reports for assessment. Submitted 25% to less than 50% of the required
4
risk survey reports
The numbers required are as follows: Submitted less than 25% of the required risk
0
survey reports
No. of Deployment Number of risk survey Assessor’s Observation
Sites for submission
1 or 10% of total sites
1 – 50
(whichever is higher)
Example:
Out of 80 deployments sites, 50 refused to
conduct security risk surveys and the SA is
able to provide evidence to show this. In this
case, the number of sites will be deemed as 30
(80 – 50) for this purpose. Therefore, based
on the requirement of this criterion, the SA is
required to submit 3 risk surveys.
Total
RESTRICTED
15
RESTRICTED
Final version
SECURITY AGENCIES (SAs) GRADING EXERCISE 2019
DOCUMENTATION CHECKLIST
Systems and Technology Category
Remarks/Observations Points
Areas of Audit
(To tick or circle where appropriate) Awarded
3.1.1
Score System (max 40 pts) pt
How did the SA redesign the Security
Officer’s job functions to weave in What was the Security Officer’s job scope and
technology in order to enhance responsibility before the job was redesigned with 5
productivity? the incorporation of technology?
The agency must submit a write-up that Describe how the technology has supported the
15
contain the following components: redesign of this job
What was the Security Officer’s job Describe the Security Officer’s new/ revised job
scope and responsibility before the job scope and responsibility after the job was re- 5
was redesigned with the incorporation of designed
technology? What productivity enhancements and/or manpower/
Describe how the technology has man-hours savings did the SA achieve through the 10
supported the redesign of this job job re-design?
Describe the Security Officer’s new/
revised job scope and responsibility after How was the re-designed job aligned with the
5
the job was re-designed Security Industry Transformation Map strategies?
What productivity enhancements and/or Assessor’s Observation
manpower/ man-hours savings did the
SA achieve through the job re-design?
How was the re-designed job aligned
with the Security Industry Transformation
Map strategies?
Total
RESTRICTED
16