What is the first action when a suspicious person is observed in a restricted area?

• A. Evacuate the area and call EOD.
• B. Ignore until a guard arrives.
• C. Sound the alarm and retreat.
• D. Contact BDOC, initiate contact, block from resource, obtain badge status, detain/apprehend if unauthorized, update BDOC, sweep for tampering.

Answer: (D)

When a suspicious person appears in a restricted area, the immediate action is to coordinate a security response through BDOC. Notify BDOC at once to bring the centralized command into the loop, then establish contact with the individual to assess intent and determine whether access should be denied. Block access to the restricted resources to prevent any potential breach, and obtain the person’s badge status to verify whether they have the credentials to be there. If they are unauthorized, detain or apprehend according to protocol to secure the area. Keep BDOC updated as the situation develops, and sweep the area for tampering to ensure there are no compromised systems or bypasses. This approach provides rapid threat assessment, containment, and accountability, maintaining both safety and the integrity of the restricted space. Other options either delay containment, misallocate response resources, or fail to establish centralized coordination.