Which ALERT step is associated with identifying suspicious activity through observation?

• A. Look
• B. Check
• C. Monitor
• D. Review

Answer: (A)

Look focuses on noticing what’s happening through your direct observation. In this step you’re trained to be vigilant and to spot anything unusual in the environment—things like someone loitering near deliveries, unattended packages, doors left propped open, or unusual behavior by staff or visitors. When something doesn’t seem right, you report it through the proper channels so security can assess and respond. This makes Look the active identification moment in ALERT, since you’re relying on what you see to trigger a response.

The other steps involve actions after identification: Check means verifying information or credentials to confirm a potential concern; Monitor refers to ongoing, continuous surveillance of an area; Review involves examining records or past events to understand what happened and improve security.