10.3 Contraband, Security Awareness, and Risk Clues
Key Takeaways
- Security-awareness items ask which detail creates the most risk, not which detail is loudest or most dramatic.
- Contraband suspicion must rest on stated clues, policy context, and observed behavior—never on unsupported certainty.
- The 'what's wrong with this picture' item asks you to spot the policy violation, safety hazard, or security breach hidden inside an ordinary scene.
- Scan every scene for access, line of sight, concealment, hand-to-hand exchange, timing, and environmental control.
- Problem Solving is a current IOS NCOSI domain and a Stanard NCST skill, so security clues usually connect to reasoning about the safest next step.
The Security-Awareness Mindset
Security-awareness questions test whether you notice the detail that changes risk. The obvious detail might be two people arguing loudly; the important detail might be the unattended door behind them, an object passing hand-to-hand, a blocked camera view, or a person standing where they can watch staff while others act — a lookout. The best answer identifies what could affect safety, control, or accountability, which is the core of situational awareness on a tier.
Situational awareness is not paranoia. It is the trained habit of continuously reading the environment for changes from normal: a tool out of place, a count that does not match, a person where they should not be, a covered window, an open cabinet. Officers who lose situational awareness are how escapes, assaults, and introductions of contraband happen, so selection exams probe whether a candidate naturally scans for these conditions.
The "What's Wrong With This Picture" Item
A common format shows a scene — often a photo or diagram of a dayroom, cell, control booth, or sally port — and asks: "Which condition in this picture is the most serious security or safety concern?" You are hunting for the policy violation, safety hazard, or security breach hidden among normal details. Candidates fail this item by choosing the most visually busy element instead of the most dangerous one. Train yourself to ask, in order: Can someone get out or in who should not? Can someone get hurt? Can something be hidden, taken, or passed?
| Risk clue | Why it matters | Careful wording for your answer |
|---|---|---|
| Hand-to-hand exchange | Possible unauthorized transfer | "Observed an exchange of a small item" |
| Blocked line of sight | Reduced supervision | "View was blocked near the doorway" |
| Unsecured access | Movement or entry risk | "The door was not secured in the prompt" |
| Concealment behavior | Item may need inspection | "Person placed an item under bedding" |
| Timing mismatch | Statement may conflict with sequence | "Person reported being elsewhere at that time" |
| Environmental hazard | Injury or escape aid | "A tool was left unsecured on the table" |
The Five-Point Security Scan
When you read or view a scenario, scan in five fixed lanes so nothing is missed:
- Access — doors, keys, gates, restricted areas, and movement points. Is anything open, propped, or unsecured?
- Objects — packages, tools, clothing, containers, papers, altered items. Is anything missing, added, or out of place?
- People — proximity, grouping, lookout behavior, separation, unusual movement. Is anyone positioned to watch or to shield?
- Timing — before count, after a search, during shift change, or when staff are distracted. Is the timing convenient for a violation?
- Records — mismatches between a statement, log, count, or observed fact. Do the facts agree?
Wording Suspicion Without Overclaiming
Contraband questions demand careful language. If the prompt says an officer saw a small wrapped item pass from one person to another, the safe observation is the exchange. It may be a suspicious exchange, but it is not automatically proof of contraband unless the question supplies a search result, a policy definition, or other facts. Problem Solving — a current IOS NCOSI domain and a Stanard NCST skill — here means using the observed facts to pick the safest next concern, not inventing a hidden story.
Avoid two extremes. Indifference ignores a clue because nothing is proven yet; overclaiming accuses someone of a specific violation without enough facts. Professional security awareness lives between them: take clues seriously, stay factual, and follow procedure. When a suspicious exchange occurs, the officer may need to maintain observation, notify a supervisor, follow search procedures, control movement, and document the facts — the exact best action depends on the scenario and the agency rules supplied.
Finally, read the question stem for the word that scopes your answer. If it asks for the first concern, choose the detail with the most immediate safety or security risk. If it asks for the best documentation, choose objective description. If it asks for the best inference, choose the one most directly supported by the stated facts. Matching your answer to the exact word the stem uses is often the difference between a defensible choice and a trap.
Prioritizing Risks: Life-Safety First
When a scene contains several concerns, you need an order of priority, because security-awareness items often ask for the single most serious one. Corrections practice and most training follow a rough priority order:
- Life safety — anything that can cause immediate injury or death: a weapon, a fight, a medical emergency, an unsecured firearm in a contact area.
- Escape / containment — anything that lets a person get out or move where they should not: an open perimeter door, a defeated lock, a compromised count.
- Introduction of contraband — drugs, weapons, or tools entering the secure area, often via exchange or concealment.
- Order and accountability — out-of-place items, mismatched logs, unauthorized groupings.
If an item offers both "two inmates arguing" and "a fire exit chained shut," the chained exit is the higher-priority answer because it is a life-safety and escape concern, while the argument is, for now, an order issue. Training yourself to rank by this hierarchy turns a vague "which is worst" question into a quick, defensible decision.
Worked Security-Awareness Item
** The propped-open control booth door is the answer — it is an unsecured access point to a sensitive area (escape/containment risk), outranking the wet-floor hazard (a real but lesser safety issue), the quiet conversation (normal), and the box-carrying (routine unless policy says otherwise). Notice how the dramatic-looking details are decoys and the genuine breach is the quiet one. That is the recurring lesson of security-awareness items: scan for the breach, rank by the life-safety-first hierarchy, and word your answer to exactly what the stem asks.
In a 'what's wrong with this picture' item, which element should you treat as the most serious concern?
Which statement is the most careful after observing a small wrapped item pass between two people?
Which detail is most likely the intended security-awareness clue in a scenario?
What is the core problem with overclaiming in a contraband scenario?