Last reviewed: · editorial process
California Guard Card Study Guide (2026): BSIS Power to Arrest Exam
To work as an unarmed security guard in California you need a BSIS Security Guard Registration(“guard card”). The gateway is the Power to Arrest and Appropriate Use of Force training and exam, which you must pass with a score of 100% (16 CCR § 628). This free guide covers the tested essentials — every fact is cited to the California Bureau of Security & Investigative Services — then drops you into free practice questions.
The BSIS guard card at a glance
- Regulator
- CA Bureau of Security & Investigative Services (BSIS)
- Pre-assignment training
- 8 hours: Power to Arrest (3h) + Appropriate Use of Force (5h)
- Power to Arrest exam
- Must pass with a score of 100% (16 CCR § 628); retakes allowed
- Total training
- 40 hours, completed within 6 months of employment
- Background check
- Live Scan fingerprints to DOJ/FBI required
- Registration validity
- 2 years; renew with 8 hours of CE per year
- WMD & Terrorism Awareness
- A 4-hour elective course (not the pre-assignment course)
The tested essentials
The five areas the Power to Arrest & Appropriate Use of Force exam keeps coming back to.
Power to arrest: you act as a private person
A security guard is not a peace officer. Your authority to detain or arrest is the same private-person (“citizen’s”) arrest authority any member of the public has — you may arrest for a misdemeanor committed or attempted in your presence, or for a felony that was in fact committed, when you have reasonable cause. This is the core of the BSIS Power to Arrest module, and it is the single most heavily tested topic. Knowing the limits of that authority — and when to observe and report instead of act — is what the exam is checking.
Appropriate Use of Force (SB 652)
Effective under SB 652, the pre-assignment course now pairs Power to Arrest with a 5-hour Appropriate Use of Force module. Force must be objectively reasonable under the circumstances; guards are trained to de-escalate first, use only the force necessary, and stop once a threat ends. Prohibited and higher-risk techniques, the duty to render aid, and the duty to report every use-of-force incident are all fair game on the exam.
Observation, documentation & the incident report
Most of a guard’s real value is observing and reporting. A good incident report is factual, objective, and complete — it answers who, what, when, where, why, and how, records events in the order they happened, and avoids opinion or conclusion. The exam tests your ability to tell an observation (“the door was open”) from an assumption(“someone broke in”), because accurate notes are what stand up later in an investigation or in court.
Communication, ethics & public relations
A guard represents the client and the employer, so professional conduct, clear radio and verbal communication, and lawful, non-discriminatory treatment of the public are tested. This includes handling difficult people calmly, following post orders, protecting confidential information, and knowing the ethical limits of the role — you enforce rules and deter, you do not act as police.
Emergency response & WMD / terrorism awareness
Guards are trained to respond to fires, medical emergencies, evacuations, and hazards, and to recognize and report suspicious activity. Weapons of Mass Destruction & Terrorism Awareness is offered as a 4-hour elective course under the BSIS syllabus — it is not part of the mandatory 8-hour pre-assignment block, a point third-party guides frequently get wrong. The tested mindset is awareness and reporting through proper channels, not intervention.
Study every topic
Introduction
A security guard's real product is information — accurate observation, clearly documented, delivered to the people who need it. The camera does not testify; you do. A theft, an assault, a slip-and-fall, a use of force: months later, the only reliable record of what happened is the report you wrote and the notes behind it. A vague, editorial, or contradictory report loses cases; a specific, factual, chronological one wins them. This chapter teaches you to see deliberately, note contemporaneously, and write in a way that would satisfy a judge reading it five years from now.
It covers patrol technique and situational awareness, the discipline of note-taking and the 5W + H report structure, systematic suspect and vehicle descriptions, and the legal limits on photography and audio recording in a two-party-consent state.
Learning objectives
After working through this chapter you should be able to:
- Patrol with varied patterns and situational awareness (Cooper's color codes; the OODA loop), using all your senses.
- Take contemporaneous notes and write a report answering Who, What, When, Where, Why, How with facts, not conclusions.
- Give a systematic head-to-toe suspect description and a CYMBALS vehicle description.
- Apply the two-party consent rule for audio (Penal Code §632) and the privacy limits on recording (Penal Code §647(j)), and treat images as evidence.
- Explain how contemporaneous notes refresh recollection for later testimony (Evidence Code §771).
Part A — Patrol patterns and situational awareness
Good patrols are neither random wandering nor predictable loops. A predictable patrol teaches a hostile actor exactly when you will be at the back dock; a varied patrol — changing direction, timing, and route, with deliberate pauses to listen — denies them that. Practical habits: walk against vehicle traffic so you can see drivers; use your nose (smoke, fuel, marijuana often register before anything is visible) and your ears (breaking glass, raised voices, alarms) as much as your eyes.
Two mental models anchor awareness:
- Cooper's color codes. White = oblivious (never acceptable on duty); Yellow = relaxed alert (your normal on-duty baseline); Orange = a specific possible threat identified, plan forming; Red = acting on the threat. Live in Yellow.
- The OODA loop. Observe, Orient, Decide, Act — cycle continuously so you keep updating on fresh information instead of locking onto your first guess.
Your post orders define the patrol path; your awareness determines whether the patrol accomplishes anything.
Part B — Notes and reports: the 5W + H, written contemporaneously
Every incident report answers six questions:
- Who — everyone involved, with full names where available, detailed descriptions where not, witness contact information, and your own name and post.
- What — what happened, in plain chronological order, with concrete facts ("the man swung his right fist at the cashier"), not conclusions ("he became aggressive").
- When — specific times from your watch or radio log, for each step.
- Where — the exact location on the property, detailed enough that a stranger could find it.
- Why — the hardest box: stick to facts and reported statements; do not guess at motive unless the subject told you.
- How — how the events unfolded and how they were resolved.
Take notes during the incident if it is safe, or immediately after while it is fresh. The bridge from raw notes to clean report to courtroom testimony months later is California Evidence Code §771, which allows a witness to refresh recollection from a writing made when the events were fresh. Two rules make a report defensible: write facts over conclusions ("the subject said he had three beers," not "the subject was drunk"), and apply the stranger test — could someone who was not there reconstruct what happened from your report alone? If not, rewrite it.
Part C — Suspect and vehicle descriptions that hold up
Build a suspect description head to toe so a responding officer can broadcast it without gaps: gender and approximate age; race/ethnicity if discernible; height and build; hair (color, length, style); eyes; facial hair, glasses, scars, tattoos; hat; shirt and outerwear with colors; pants; shoes; anything in the hands; and direction of travel. Practice the sequence out loud on slow shifts — the time to learn the script is not while someone is running away.
For vehicles, a common California mnemonic is CYMBALS: Color, Year, Make, Body style, All other (damage, decals, distinguishing marks), License, State. The license plate beats every other identifier — get it first if you can; if you cannot, get a partial plate and the state. For weapons, describe what you actually saw ("a black semi-automatic pistol with a stainless slide"), rather than guessing make and model. Use compass directions for travel, not "that way."
Part D — Photography, recording, and privacy
Phones make documentation easy and legally complicated at once.
- Video without sound, in a public space or your employer's premises where there is no reasonable expectation of privacy, is generally allowed.
- Audio is the harder line. California is a two-party (all-party) consent state under Penal Code §632: it is a crime to record a confidential communication without the consent of all parties. Body cameras that capture audio in private areas implicate §632 — know whether your company policy or a posted written notice supplies the needed consent.
- Privacy crimes. Penal Code §647(j) makes it a crime to photograph or record a person in a place where they have a reasonable expectation of privacy — restrooms, dressing rooms, hotel rooms — even with no audio.
- Treat images as evidence. Do not edit them, do not post them to social media, and turn them over to your supervisor with a clear chain of custody.
Write and photograph as if a judge will read and view it tomorrow — because one might.
California worked example
At 9:42 p.m. a guard hears glass break near the loading dock, moves to Yellow-to-Orange, and sees a man throw a laptop bag over a fence and run west toward Elm Street in a gray hooded sweatshirt.
The report writes itself if the observation was disciplined. When: 9:42 p.m. (from the radio log). Where: northeast loading dock, exterior. Who/What (facts): "I heard glass breaking; I observed a male adult, approximately 20–30, ~5'10", medium build, gray hooded sweatshirt, dark pants, throw a dark laptop bag over the north fence and run west on Elm Street." Suspect description head-to-toe, finishing with direction of travel (west). Vehicle, if one was used, in CYMBALS order with the plate captured first. The guard does not write "the burglar" (a conclusion) but "a male adult who threw a bag and fled." If the guard used a phone to photograph the broken window, those images are evidence — unedited, handed to the supervisor, not posted anywhere. Notes taken now let the guard refresh recollection (Evidence Code §771) if called to testify next year.
Key numbers & deadlines
Awareness models: Cooper's color codes (White / Yellow / Orange / Red — operate in Yellow); OODA loop (Observe, Orient, Decide, Act). Vary patrol patterns; use all senses. Report structure: 5W + H (Who, What, When, Where, Why, How); chronological, specific times/names/locations, facts over conclusions. Descriptions: suspect head-to-toe, ending with direction of travel; vehicle CYMBALS (Color, Year, Make, Body, All-other, License, State). Plate beats all other IDs. Recording law: audio = two-party consent, Penal Code §632 (crime to record a confidential communication without all-party consent). Penal Code §647(j) — criminal invasion of privacy (restrooms, dressing rooms, etc.). Treat images as evidence (no edits, chain of custody). Testimony: contemporaneous notes refresh recollection — Evidence Code §771.
Named exam traps
- "A good patrol follows the same reliable route every time." No — predictable patrols are exploitable. Vary route and timing.
- "Write your conclusion so it's clear ('he was drunk / he was the thief')." No — write facts ("said he had three beers"; "threw a bag and fled"). Conclusions belong to others.
- "Guess the make and model of the gun so the report looks complete." No — describe what you saw. Guessing invents evidence.
- "You can record any conversation on duty." No — audio needs all-party consent (§632); recording a confidential conversation without it is a crime.
- "A photo is just a photo — edit or share it freely." No — images are evidence; no edits, no social media, keep a chain of custody. Recording in restrooms/dressing rooms violates §647(j).
- "Notes don't matter once you file the report." No — contemporaneous notes are what let you refresh recollection (Evidence Code §771) in court months later.
Key takeaways
- Patrol with varied patterns and stay in Cooper's Yellow; run the OODA loop and use every sense.
- Write 5W + H, chronological, specific, and factual — pass the stranger test.
- Describe suspects head-to-toe (end with direction of travel) and vehicles by CYMBALS, capturing the plate first.
- Audio recording needs all-party consent (§632); respect privacy (§647(j)); treat images as evidence.
- Contemporaneous notes refresh recollection at trial (Evidence Code §771).
Sources
Cited to leginfo.legislature.ca.gov (Penal Code, Evidence Code). Awareness models (Cooper's color codes, OODA, CYMBALS) are standard security-training frameworks, not statutes.
- Cal. Penal Code §632 — recording of confidential communications (two-party consent).
- Cal. Penal Code §647(j) — invasion of privacy by recording/photography.
- Cal. Evidence Code §771 — refreshing recollection from a writing.
- Security-training frameworks: Cooper's color codes; the OODA loop (J. Boyd); CYMBALS vehicle- description mnemonic; the 5W + H report standard.
Powers to Arrest
Authority to detain and arrest under California Penal Code §§834-851 — the statutes that define arrest, who may make one (peace officers under §836 vs. private persons under §837), reasonable cause, and what to do after.
Appropriate Use of Force
Reasonable-force standards for private security under California law, including the §835a peace-officer framework as reference, de-escalation duties, deadly vs. non-deadly force, and the SB 230 (2020) clarifications carried into the 2026 BSIS curriculum.
Liability & Legal Aspects
Civil and criminal liability exposure for security personnel: false imprisonment, battery, negligent hiring, vicarious liability of the employer (respondeat superior), trespass authority under §602, and mandatory-reporting duties.
Observation, Documentation & Report Writing
Patrol techniques, environmental awareness, note-taking, narrative report writing, witness questioning, and the documentation standards a security incident report must meet to be credible in court.
Communication, Public Relations & Ethics
Customer-service principles, conflict management and de-escalation through communication, body language, deception cues, written communication, and dealing with the press, government, and the public.
Emergency Procedures & Officer Safety
Fire, medical, and evacuation response; officer survival principles; basic first aid; equipment use; and coordination with police, fire, and medical responders.
Terrorism Awareness & WMD
Nature of terrorism, weapons of mass destruction (chemical, biological, radiological, nuclear, explosive), suspicious-activity indicators, and coordinating and sharing critical information with appropriate authorities.
Practice by topic
Jump straight into free practice questions for any single Guard Card topic.
California guard card exam — frequently asked questions
What is on the California guard card (BSIS) exam?
The core test is the BSIS Power to Arrest and Appropriate Use of Force examination, covering powers of arrest, reasonable use of force, observation and documentation, communication, ethics, and emergency response. You must pass it with a score of 100% (16 CCR § 628); retakes are permitted until you pass.
How many hours of training does a California guard card require?
40 hours total, completed within 6 months of starting work. This includes an 8-hour pre-assignment block — Power to Arrest (3 hours) plus Appropriate Use of Force (5 hours) — that must be finished before you are assigned to a post, followed by additional mandatory training. Source: BSIS Security Guard Training Regulation (bsis.ca.gov).
Do I need Weapons of Mass Destruction (WMD) training for a guard card?
WMD & Terrorism Awareness is a 4-hour elective course under the BSIS syllabus, not part of the mandatory 8-hour pre-assignment training. The required pre-assignment courses are Power to Arrest and Appropriate Use of Force.
What score do I need to pass the Power to Arrest exam?
100%. Under 16 CCR § 628 you must answer every question correctly to complete the Power to Arrest and Appropriate Use of Force training. Retakes are allowed, and most students pass within one or two attempts.
Does a guard card let me carry a gun on duty?
No. A guard card (BSIS Security Guard Registration) authorizes unarmed work only. To carry a firearm on duty you need a separate BSIS Firearms Permit, which requires additional firearms training, a separate exam, and periodic requalification.
How long is a California guard card valid?
Two years from the date of issue. To keep it current you must complete 8 hours of continuing education each year and renew the registration with BSIS before it expires.
Is a security guard a peace officer in California?
No. A security guard acts with private-person arrest authority, not peace-officer powers. Understanding that distinction — and when to observe and report rather than intervene — is central to the BSIS Power to Arrest exam.
Sources: California Bureau of Security & Investigative Services (bsis.ca.gov), BSIS Security Guard Training Regulation. Course structure reflects the DCA Power to Arrest and Appropriate Use of Force Training Manual (July 2023) under SB 652. This is study material, not legal advice.
Sample practice questions
A few real questions from this free bank, with full explanations. Use the practice tool above for the whole set.
- 1. Powers to Arrest
Under California Penal Code §835, an arrest is made by which of the following?
- a.Announcing 'you are under arrest,' since the spoken declaration is what legally completes it
- b.An actual restraint of the person, or by submission to the custody of an officer
- c.Summoning police to the scene, because an arrest only begins when a peace officer arrives
- d.Having a witness positively identify the suspect, which fixes the identity and effects the arrest
Answer: b
Explanation: Penal Code §835 defines an arrest as being made by 'an actual restraint of the person, or by submission to the custody of an officer.' The person arrested may be subjected to such restraint as is reasonable for the arrest and detention. Verbal statements (a), summoning police (c), and witness identification (d) do not by themselves constitute an arrest under §835.
Source: Cal. Penal Code §835
- 2. Powers to Arrest
Which of the following best summarizes a key procedural difference between a peace-officer arrest and a private-person arrest?
- a.A peace officer may arrest for a felony on probable cause even if no felony actually occurred; a private person bears the risk that no felony was 'in fact committed'
- b.Peace officers must inform the arrestee of the charge before restraining them, while a private person making a citizen's arrest owes no such notice at all
- c.Private persons may resort to deadly force as a first option because they have no backup, while peace officers must exhaust lesser alternatives first
- d.Peace officers must obtain a warrant from a magistrate before every arrest unless the suspect is actively fleeing, while a private person may arrest without any warrant at all under §837
Answer: a
Explanation: The core procedural difference is the §837(3) 'in fact committed' requirement applied to private-person felony arrests, contrasted with the §836 probable-cause standard for peace officers. A peace officer acting reasonably is protected even if it later turns out no felony actually occurred; a private person is not. Both peace officers and private persons must give §841 notice (b is wrong). Deadly force authority is narrower, not broader, for private persons (c). Warrantless arrests are widely authorized for both categories under §§836 and 837 (d is wrong).
Source: Cal. Penal Code §§836, 837; People v. Cervantez factor analysis
- 3. Use of Force
The U.S. Supreme Court in Graham v. Connor (1989) 490 U.S. 386 established that the constitutional reasonableness of force is judged from:
- a.The subjective intent of the officer at the moment force was applied, since a good motive is what makes a use of force reasonable
- b.The perspective of a reasonable officer on the scene, without the benefit of 20/20 hindsight, considering the totality of the circumstances
- c.The view of the suspect who was subjected to the force, because the person on the receiving end is best placed to say whether it was excessive at the time
- d.An outcomes-based test focused on the injuries actually inflicted, so that force producing no injury is reasonable and force producing injury is not
Answer: b
Explanation: Graham v. Connor adopted the objective-reasonableness standard for Fourth Amendment seizure-by-force claims: courts judge force from the perspective of a reasonable officer on the scene, without 20/20 hindsight, considering all the facts and circumstances, including the severity of the crime, whether the suspect poses an immediate threat, and whether the suspect is actively resisting or attempting to flee. Subjective intent (a) is not the test; suspect perception (c) is not the standard; outcome-based liability (d) was rejected. Although Graham concerns peace officers, its reasonableness framework informs private-security civil standards.
Source: Graham v. Connor (1989) 490 U.S. 386
- 4. Use of Force
When confronted by multiple non-compliant subjects, the guard's force decision should consider:
- a.Always escalate to the highest force option immediately, because a show of overwhelming force against a group is what ends a confrontation fastest and most safely for the guard
- b.Force is unlawful whenever multiple subjects are present, since a guard outnumbered by a group cannot be acting in reasonable self-defence and must withdraw and call police
- c.Force is permitted only after every one of the subjects has actually thrown a punch, so the guard can point to a completed attack by each person he used force against
- d.The totality of circumstances — number of subjects, distance, weapons, environment, available escape routes, and feasibility of de-escalation — calibrating force to actual threat and continuing to consider lower-force alternatives
Answer: d
Explanation: Reasonableness is necessarily totality-driven. Numbers, proximity, weapons, terrain, and exit options bear on threat assessment but do not relieve the guard of the duty to consider de-escalation and proportionality. Reflexive maximum force (a) is unlawful and tactically poor; categorical force prohibitions (b) ignore the right of self-defense; waiting for an attack from each subject (c) is dangerous and not a legal requirement when an imminent threat is reasonably perceived. Tactical retreat is often the best option.
Source: Cal. Penal Code §835a; multi-subject threat assessment
- 5. Liability & Legal
A guard privately reports a suspected shoplifter to the store manager and to responding police. The shopper turns out to be innocent and sues for slander. What defense most likely applies?
- a.Qualified ('common interest') privilege under Civil Code §47(c) — the communication was made without malice between parties with a common interest in loss prevention and law enforcement
- b.Absolute legislative privilege, which covers any statement a person makes to a law-enforcement officer while reporting a suspected crime on private premises
- c.The statute of frauds, since a claim arising out of a commercial transaction cannot be brought unless the underlying agreement between the shopper and the store was first reduced to a signed writing
- d.Workers' compensation exclusivity, which bars any tort claim arising out of an incident that took place during the guard's shift and in the course of the guard's ordinary employment duties on the premises
Answer: a
Explanation: Civil Code §47(c) provides a qualified privilege for communications made without malice between parties sharing a common interest. A guard's private report to a store manager (employer common interest) and to police (law enforcement common interest) typically falls within §47(c). The privilege is defeated by malice — knowing falsity or reckless disregard for truth. Public, loud accusations to uninvolved bystanders exceed the privilege's scope. Absolute legislative privilege (b) protects statements in official proceedings, not field reports. Statute of frauds (c) and workers' comp exclusivity (d) are unrelated. Truth is also a complete defense to defamation, separate from privilege.
Source: Cal. Civil Code §47(c); Sanborn v. Chronicle Publishing Co. (1976) 18 Cal.3d 406
- 6. Observation & Reports
A guard photographs an incident scene for documentation. California's constitutional privacy right and Civil Code §1708.8 mean the guard should:
- a.Photograph anyone, anywhere, at any time and without limits, since a guard's phone stands in exactly the same legal position on private property as the owner's own fixed security cameras
- b.Never photograph anything at all during a security incident, because any image of a person captured without their agreement is an invasion of privacy under the Civil Code and may not be retained
- c.Photograph the scene, evidence, and conduct relevant to the incident with reasonable judgment — avoiding gratuitous focus on private areas (restrooms, dressing rooms), bystanders unconnected to the incident, and any constructive intrusion into protected private activity
- d.Photograph only after obtaining written consent from every person who appears anywhere in the frame, including passers-by in the background and staff at the till, since the statute makes documented consent rather than reasonableness the operative test for every single image a guard records while on duty
Answer: c
Explanation: Photography for legitimate incident documentation is a standard, defensible practice — incident scenes, evidence, injuries (where consented or in plain view), and observable conduct. California's constitutional privacy right (Cal. Const. Art I §1) and statutes like Civil Code §1708.8 caution against gratuitous photography of bystanders, focused capture of private areas like restrooms or dressing rooms (which can be actionable under PC §647(j) and §647(i)), and intrusive use of telephoto or enhancing devices to capture private activity. Reasonable judgment, employer policy, and respect for privacy norms govern lawful incident-scene photography.
Source: Cal. Constitution Article I §1; Cal. Civil Code §1708.8
- 7. Communication & PR
A well-written security incident report should be characterized primarily by:
- a.Clarity, brevity, and factual accuracy — written so a stranger reading later understands what happened
- b.Vivid adjectives and emotional language that convey to whoever reads it later just how serious the incident really was on the night
- c.Legal conclusions stating whether the suspect committed a crime and precisely which statute was broken by the conduct described
- d.The author's own personal opinions about each of the parties involved and about how they conducted themselves throughout the encounter
Answer: a
Explanation: BSIS report-writing standards emphasize clarity, brevity, and accuracy. Reports must convey who, what, when, where, why (if known), and how, using neutral observable facts rather than conclusions or opinions. Emotional language (b) undermines credibility in court; legal conclusions (c) are reserved for prosecutors, judges, and juries; opinions (d) expose the writer and the employer to defamation claims. The standard test: a reader who was not present should understand the incident from the report alone.
Source: BSIS report-writing standards; CSI principle: clarity, brevity, accuracy
- 8. Emergency & Safety
An employee answering a phone receives a bomb threat. The FBI/DHS-endorsed protocol calls for the call-taker to:
- a.Hang up immediately and ignore the call as a prank, since a caller who genuinely intended to plant a device in the building would not announce it in advance over the telephone to a receptionist
- b.Stay on the line, record the caller's exact words, note voice characteristics and background sounds, signal a coworker to call 911, and after the call, complete the FBI bomb-threat checklist
- c.Demand the caller's name and warn them that the call is being traced and that they will be arrested for making a threat of this kind against a commercial building
- d.Page the whole building over the public-address system to announce that a bomb threat has just been received, so that every occupant can decide for themselves whether they want to leave the premises at once
Answer: b
Explanation: FBI/DHS bomb-threat protocol calls for keeping the caller on the line as long as possible, recording exact words verbatim, noting voice characteristics (accent, age, gender, demeanor), background sounds (traffic, machinery, music, voices), and any specific details about the device or motive. A coworker silently signals 911. The completed Bomb Threat Checklist gives investigators critical leads. Hanging up (a) destroys intelligence value; threatening the caller (c) escalates and ends the call; public PA announcements (d) cause panic and may trigger an actual detonation if a device is present.
Source: FBI/DHS Bomb Threat Stand-Off Card and Checklist

Practice stays free. The full California Guard Card (BSIS Security Guard) study guide is the material itself, taught start to finish — a downloadable PDF + EPUB you keep.