When a perimeter breach is detected, which action aligns with escalation procedures?

• A. Ignore the breach if not sure it's real.
• B. Escalate to full-field security response, notify supervisors, and coordinate with authorities.
• C. Only document it and wait for a second incident.
• D. Remove barriers to ease access.

Answer: (B)

Escalation and coordinated incident response are what you need to do when a perimeter breach is detected. Treat the breach as a potential intruder event that could escalate, so you mobilize the right people and actions immediately rather than waiting to see what happens. Escalating to a full-field security response ensures trained teams are on site, can contain and assess the situation, and prevent further access. Notifying supervisors creates a clear chain of command and ensures the incident is logged at the proper level, while coordinating with authorities brings in external support if the situation requires legal or investigative steps. This approach also helps preserve evidence, document the incident accurately, and maintain a proper incident timeline for after-action review.

Other options fail because they delay or dilute the response: ignoring the breach risks allowing an intruder to exploit the opening; documenting alone without a timely response leaves the site vulnerable; and removing barriers could create safety hazards and undermine controlled security procedures.