PassEveryTest
English

Counter-Terrorism Awareness Course (UK) 2026

This course is for security officers and front-line staff in the UK. It covers the threat levels, hostile reconnaissance, suspicious items, bomb threats, Run Hide Tell and Martyn's Law, based on official public guidance. It is awareness only. Contracted security work usually needs an SIA licence, and the SIA requires a licence-linked qualification before you apply; this course is not one of them.

  • Course
  • United Kingdom
  • 25 questions
  • Checked October 13, 2026

Quick answer

This free course has about 35 minutes of lessons and a 25-question test. Score 80% or more to download a certificate of completion (private, not accredited). Checked against official sources on October 13, 2026.

Start with the lessonsCounter-Terrorism Awareness Course (UK): Lessons: about 35 minutes of reading. Every test question is covered in the lessons.

What you will learn

  • Explain the five UK threat levels and who sets them
  • Recognise signs of hostile reconnaissance and report them to the right place
  • Use the HOT questions and the 4 Cs for a suspicious item
  • Respond to a bomb threat by phone or email
  • Apply Run, Hide, Tell in a weapons attack
  • Describe what Martyn's Law will require of premises and staff

Score 80% or more to download your certificate.

  1. Question 1 of 25

    What does the UK threat level SUBSTANTIAL mean?
    Show answer

    Answer: C. An attack is likely

    MI5 defines SUBSTANTIAL as "an attack is likely". MODERATE means possible but not likely, SEVERE means highly likely, and CRITICAL means highly likely in the near future.

  2. Question 2 of 25

    Who sets the UK national threat level?
    Show answer

    Answer: D. The Joint Terrorism Analysis Centre

    MI5 explains that the national threat level is set by the Joint Terrorism Analysis Centre (JTAC).

  3. Question 3 of 25

    Who sets the threat level for Northern Ireland-related terrorism in Northern Ireland?
    Show answer

    Answer: C. MI5

    Northern Ireland has a separate threat level for Northern Ireland-related terrorism, and MI5 is responsible for setting it.

  4. Question 4 of 25

    Why do attackers carry out hostile reconnaissance?
    Show answer

    Answer: C. To learn about security and weak spots before an attack

    Hostile reconnaissance is purposeful watching to collect information for planning a hostile act, such as how strong security is and where the weak spots are.

  5. Question 5 of 25

    Which behaviour could be a sign of hostile reconnaissance?
    Show answer

    Answer: A. Close interest in entrances, CCTV cameras and security staff

    ProtectUK lists close interest in entrances, exits, CCTV cameras, security features or staff as possible signs of hostile reconnaissance.

  6. Question 6 of 25

    When deciding whether someone may be carrying out hostile reconnaissance, what should you focus on?
    Show answer

    Answer: A. What they are doing

    ProtectUK says you cannot spot a hostile from their appearance, age, ethnicity, gender or clothing, so focus on behaviour.

  7. Question 7 of 25

    In the See, Check and Notify (SCaN) approach, what does Notify cover?
    Show answer

    Answer: B. Who to tell and what to tell them

    In SCaN, See is spotting hostile reconnaissance, Check is knowing what to do, and Notify is knowing who to tell and what to tell them.

  8. Question 8 of 25

    A person acting suspiciously is still at your site and you need police straight away. What should you do?
    Show answer

    Answer: C. Call 999

    ProtectUK says to call 999 if the person is still at the scene and an immediate police response is needed.

  9. Question 9 of 25

    A person you thought was suspicious left over an hour ago. Which is a suitable way to report it?
    Show answer

    Answer: A. The Anti-Terrorist Hotline on 0800 789 321

    If the person has left or time has passed, report to the Anti-Terrorist Hotline on 0800 789 321, online, or by calling 101.

  10. Question 10 of 25

    What does ProtectUK say helps make hostiles worried about being caught?
    Show answer

    Answer: B. Alert, engaged security staff and active CCTV operators

    Vigilant, engaged security officers and well-placed CCTV with proactive operators can make hostiles anxious about being detected.

  11. Question 11 of 25

    In the HOT questions for an unattended item, what does the T ask?
    Show answer

    Answer: C. Is it typical of what you would expect in this place?

    HOT stands for Hidden, Obviously suspicious and Typical. T asks whether the item is typical of what you would expect to find in that location.

  12. Question 12 of 25

    Which feature would make an unattended item obviously suspicious?
    Show answer

    Answer: B. Visible wires, batteries or tape

    Under the O in HOT, visible wires, circuit boards, batteries, tape, liquids or putty-like material make an item obviously suspicious.

  13. Question 13 of 25

    What is the correct order of the 4 Cs for a suspicious item?
    Show answer

    Answer: C. Confirm, Clear, Communicate, Control

    The 4 Cs are Confirm the item is suspicious, Clear the area, Communicate by calling 999, and Control access to the cordon.

  14. Question 14 of 25

    What is the minimum distance to clear around a suspicious rucksack?
    Show answer

    Answer: D. 100 metres

    ProtectUK recommends clearing at least 100 metres around a small item such as a rucksack.

  15. Question 15 of 25

    A suspicious van is parked outside a busy venue. What is the minimum distance to clear?
    Show answer

    Answer: A. 400 metres

    ProtectUK says to clear at least 400 metres from a large vehicle such as a van or lorry, and 200 metres from a car.

  16. Question 16 of 25

    Within what distance of a suspicious item should you avoid using radios and mobile phones?
    Show answer

    Answer: A. 15 metres

    ProtectUK advises not to use radios or mobile phones within 15 metres of a suspicious item.

  17. Question 17 of 25

    After clearing people away from a suspicious item, where should they shelter?
    Show answer

    Answer: C. Behind solid cover, away from glass

    People should shelter behind substantial cover such as brick or concrete, away from glass and parked vehicles, and out of the item's line of sight.

  18. Question 18 of 25

    During the Control step, what should you do with people who saw the item being left?
    Show answer

    Answer: C. Keep them for the police or take their contact details

    In the Control step, ProtectUK says to keep eyewitnesses available for the police, or record their contact details before they leave.

  19. Question 19 of 25

    A caller says there is a bomb in the building, then hangs up. If your phone system allows, what should you do next?
    Show answer

    Answer: C. Dial 1471 to try to get the caller's number

    ProtectUK advises dialling 1471 after a threatening call, if possible, and reporting every threat to the police.

  20. Question 20 of 25

    A bomb threat arrives by email. What should you do with the email?
    Show answer

    Answer: C. Keep it and do not reply, forward or delete it

    For email and social media threats, ProtectUK says do not reply to, forward or delete the message, and keep a record for the police.

  21. Question 21 of 25

    During a weapons attack, what does Run, Hide, Tell say about filming the incident?
    Show answer

    Answer: D. Do not try to film it

    The Run advice says to leave belongings behind and not to try to film the incident.

  22. Question 22 of 25

    Why is hiding out of sight not enough during a firearms attack?
    Show answer

    Answer: D. Bullets can go through glass, brick, wood and metal

    Run, Hide, Tell warns that cover from view does not mean you are safe, because bullets can go through glass, brick, wood and metal.

  23. Question 23 of 25

    Under Martyn's Law, which premises will be in the standard tier?
    Show answer

    Answer: B. Premises where 200 to 799 people may be present at once

    The Terrorism (Protection of Premises) Act 2025 puts premises where 200 to 799 people may be present in the standard tier, and 800 or more in the enhanced tier.

  24. Question 24 of 25

    Which body will regulate Martyn's Law?
    Show answer

    Answer: C. The Security Industry Authority (SIA)

    The Home Office says the Security Industry Authority (SIA) will carry out the regulatory functions under the Act.

  25. Question 25 of 25

    In Martyn's Law, what does invacuation mean?
    Show answer

    Answer: B. Moving people to a safer place inside the premises

    The Home Office defines invacuation as moving people away from danger to a place within the premises or event. Lockdown is securing the premises.

What to know before the test

  • The UK has five threat levels, from LOW to CRITICAL. SUBSTANTIAL means an attack is likely.
  • The national threat level is set by the Joint Terrorism Analysis Centre (JTAC). MI5 sets the level for Northern Ireland-related terrorism in Northern Ireland.
  • Clear at least 100 metres around a suspicious small item such as a rucksack, 200 metres for a car and 400 metres for a van or lorry.
  • Do not use radios or mobile phones within 15 metres of a suspicious item.
  • Suspicious activity can be reported to the Anti-Terrorist Hotline on 0800 789 321. Call 999 if you need police straight away.
  • Martyn's Law received Royal Assent on 3 April 2025. The SIA will regulate it, after an implementation period of at least 24 months.

Frequently asked questions

What should I do if I find an unattended bag?

Do not touch it. Use the HOT questions to decide if it is suspicious. If it is, follow the 4 Cs: Confirm, Clear the area, Communicate by calling 999, and Control access until police say it is safe.

Does Martyn's Law make this training compulsory?

No. The Home Office says the Act has no legal requirement for specific training. Staff with a role must still be told about their site's procedures and their part in them. This course is background knowledge only. It does not replace your employer's instructions or the licence-linked qualification the SIA requires for a security licence.

Is Run, Hide, Tell still the advice for the public?

Yes. Counter Terrorism Policing advises Run, Hide, Tell for weapons and firearms attacks. ProtectUK also publishes Guide, Shelter, Report as response principles for businesses and their staff.

Where can I see the current threat level?

On the MI5 website. The level changes from time to time, and MI5 says the public should stay alert whatever the level is.

Is the certificate accredited or officially recognised?

No. It is a private certificate of completion for knowledge only. It is not recognised, accredited or approved by any government, licensing body, regulator or educational institution, and it does not replace any licence, certification or training required by law.

Sources

Related tests