1.2 Protection of Persons, Property & Information

The Protection Triad

Everything a security guard does in Alberta falls under one of three protection objectives. This protection triad is a core ABST concept:

1. Protection of persons — keeping employees, visitors, tenants, residents, and the public safe from harm while on the protected site.
2. Protection of property — preventing theft, vandalism, fire, trespass, and damage to buildings, equipment, inventory, and assets.
3. Protection of information — safeguarding confidential records, proprietary data, access credentials, and security procedures from unauthorized disclosure.

Quick Answer: Alberta security work is built on a protection triad — persons, property, and information. A single post usually requires protecting all three at the same time, and access control is the main day-to-day tool that serves all three.

Protection of Persons

Protecting people is the highest-priority objective. If a threat to life safety conflicts with a property or information objective, life safety wins. Typical person-protection duties include:

• Escorting employees or visitors to vehicles after hours
• Responding to medical emergencies and calling EMS
• De-escalating confrontations in lobbies, parking lots, or common areas
• Enforcing occupancy limits and fire-code egress routes
• Monitoring for workplace violence indicators and reporting them

A guard protecting persons relies heavily on visible presence and early intervention — deterring threats before they become incidents.

Protection of Property

Property protection is the most visible part of security work. Duties include:

• Patrols — scheduled and random interior and exterior patrols to detect intrusion, fire, leaks, or hazards
• Access control — controlling doors, gates, loading docks, and parking areas
• Alarm response — investigating alarms and determining whether they are genuine or false
• Loss prevention — reducing theft and vandalism through observation, CCTV monitoring, and reporting
• Scene preservation — securing an incident scene until police or management arrive

Protection of Information

Information protection is often overlooked but is examined on the ABST. A guard handles sensitive information regularly — visitor logs, shift reports, alarm codes, key lists, client procedures, and sometimes personal or financial data. Duties include:

• Keeping logs and reports accurate but confidential — not discussing them off duty or with unauthorized people
• Protecting physical documents — securing sign-in sheets, incident reports, and key registers
• Not disclosing security procedures — patrol routes, alarm locations, and access credentials
• Following client privacy and data-handling rules, including any requirements under Alberta's Access to Information and Protection of Privacy Acts (which replaced FOIP in June 2025) where applicable

Access Control as the Unifying Tool

Access control is the single practice that serves all three triad elements. By controlling who enters, where they may go, and what they may access, a guard protects people (keeping threats out), property (limiting opportunity for theft/vandalism), and information (restricting access to sensitive areas and records) at the same time.

Loss Prevention Preview

Loss prevention is the combination of practices that reduces shrinkage and damage. For the ABST, remember that loss prevention is proactive, not reactive — the goal is to prevent loss before it happens, not just to catch a thief after the fact. Patrols, visibility, access control, and accurate reporting all contribute. Loss prevention is covered in more depth in later modules.

Balancing Competing Protection Priorities

Real posts rarely present the three protection objectives one at a time. A guard at a hospital emergency entrance may simultaneously be protecting triage staff (persons), controlling access to the ambulance bay (property), and keeping patient information on the triage desk out of public view (information). The ABST exam expects you to know how to rank these when they conflict.

The ranking is consistent and worth memorizing:

1. Life safety always comes first. If a threat to persons conflicts with property or information duties, protect people.
2. Preserve property and information only when it is safe to do so. After people are safe, take reasonable steps to secure assets and records.
3. Never create a new life-safety risk to save property or data. Re-entering a smoke-filled room to rescue a laptop is a failure of judgement, not heroism.

A practical test: before acting on a property or information objective, ask "Does this put anyone — including me — at risk?" If yes, evacuate, call EMS or fire, and secure the scene from outside.

Information Protection in Practice

Information protection is the triad element candidates most often underestimate. On a typical Alberta post you handle personal information constantly — visitor sign-in sheets with names and vehicle plates, key registers, incident reports naming suspects or victims, and sometimes health or financial details overheard at a client site.

Key practices:

• Treat visitor logs as confidential. Do not let a visitor photograph the sign-in sheet or read other entries. Store completed logs in a locked drawer, not on the lobby counter.
• Apply the need-to-know rule. Share incident details only with the client, your employer, police, and the Registrar where required.
• Respect Alberta privacy law where it applies. A public-sector client site may be subject to Alberta's public-sector privacy law — formerly the Freedom of Information and Protection of Privacy Act (FOIP), which was repealed in June 2025 and replaced by the Access to Information Act (ATIA) and the Protection of Privacy Act (POPA) — and a private-sector client to the Personal Information Protection Act (PIPA). You are not a privacy expert, but you must follow the client's data-handling rules and never discuss personal information outside duty.
• Watch the social-media channel. Posting "crazy night at Site X" with any identifying detail is an information breach, even without names.

Worked Scenarios

Scenario A — Fire in a records room. A small fire starts in a room holding confidential client files. The guard's first action is to evacuate anyone in the room, pull the fire alarm, and call the fire department. Only after life safety is addressed — and only if it is safe — should the guard consider moving records. Choosing files over people is an exam trap.

Scenario B — Visitor wants to photograph the log. A visitor at a condo lobby asks to photograph the visitor log to prove a friend signed in last week. The guard declines; the log contains other residents' and visitors' personal information. The guard offers to confirm the specific entry with management instead.