Airport Security Awareness Tests for Staff: What to Assess and What the Rules Say

An airport security awareness test is a short, scored check given after security awareness training. It shows whether a worker understands the security duties that come with their access: where they may go, how to show their pass, who to tell about a concern and how to act in an incident. As of October 2026, the texts read for this post require the training content, and the EU text asks trainees to demonstrate understanding. Neither sets a test format.

This post is for heads of training, airport and airline security managers, exam officers, ground handling and cargo trainers, and training companies that sell awareness courses. It will not give you answers to anyone’s live test. It also stays at awareness level: no screening methods, no detection limits, nothing that could help someone get around a control. It shows how to design a role-based test around your own program.

The EU wording was read on the UK government’s legislation.gov.uk copy of Chapter 11 of Regulation (EU) 2015/1998 as adopted in 2015, because the EUR-Lex pages returned incomplete text. The only later amendment checked, Regulation (EU) 2019/1583, did not change point 11.2.7; later amendments were not checked. The US wording comes from the eCFR text of 49 CFR Part 1542, up to date as of 22 October 2026. ICAO Annex 17 is sold by ICAO and was not read. This is not legal advice. Rules differ by country, so check your appropriate authority before you change how staff are trained or tested.

Key takeaways

• The EU text read lists five competencies for general security awareness training and asks each trainee to demonstrate understanding before taking up duty; the US rule lists six minimum topics for unescorted-access training. Neither sets a pass mark, question count or retest interval.
• Pass marks of 80 percent and 85 percent on published awareness courses are provider choices, not rules, so set and document your own after consulting your authority.
• Test what a worker would do and whom they would tell under your own security program, and keep the item bank and answer key as controlled material.
• A passed test shows knowledge on the day. It does not show behavior, so pair it with reporting data and supervisor observation.

What is an airport security awareness test, and who has to take one?

An airport security awareness test checks that a worker knows the security rules tied to their job and access. It usually follows a course or briefing, and who must sit it depends on the national aviation security program and the person’s access. Check which group you fall into with your authority.

Practice varies. Sydney Airport’s page says new workers must complete a “security awareness test” to get an Aviation Security Identification Card, without describing its format. Toronto Pearson’s page says its online security awareness training is mandatory for people applying for or renewing a Restricted Area Identity Card. Both pages were read in November 2026, and neither states a pass mark.

In the US text, the trigger is access: training comes before unescorted access to the secured area or Security Identification Display Area (SIDA). In the EU text, the trigger is the person’s role, and your national program decides who needs general awareness training.

What do EU, US and ICAO sources say about security awareness training and testing?

The EU text lists five competencies and asks trainees to demonstrate understanding before taking up duty. The US rule lists six minimum topics for unescorted-access training and requires a chance to ask questions. Neither text read sets a pass mark, a question count or a retest interval. ICAO presents training as part of security culture.

The table shows each provision as read in October 2026, with exact wording marked (quoted) and everything else paraphrased.

Can an airport security awareness test be computer-based?

The EU point 11.2.1.3 expressly contemplates computer-based courses, so the text read does not rule them out. It does require the course content to be specified or approved by the appropriate authority first. I found nothing on test software, and no regulator text read approves or certifies an assessment tool. Ask your authority what evidence it expects.

Which parts are fixed by rule, and which do you choose?

The rules fix the subjects staff must understand, and in some regimes who approves the content and how long records are kept. You choose the item types, number of questions, pass mark, number of attempts, feedback and, where nothing is mandated, the retest interval. Write those choices into your training procedure.

The table lists published programs as a reference for the choices others make. Pass rules differ, which is itself a sign that they are program settings and not regulatory numbers. All pages were read in November 2026 and describe the provider’s own course, not a regulation.

What should an airport security awareness test cover?

It should cover the competencies your program trains, weighted toward what a worker must do: report, respond and use their access correctly. Start from the five EU competencies and the US topics, then replace general wording with your own program’s routes, contacts and rules.

The blueprint below combines both texts. The weights are this post’s assumption, not a regulatory figure, so adjust them after you see how staff perform.

Test knowledge of what to do and whom to tell. Do not test how screening equipment works, how detection limits behave or how a control could fail. Staff do not need that to meet any competency listed above, and an item bank containing it becomes a problem in its own right.

How do you stop the test itself from becoming a security risk?

Treat the item bank and answer key as controlled material. Keep items at the level staff are trained on, store them under the same access rules as the security program text they paraphrase, and have your security manager review new items. Ask your authority whether your test content has handling restrictions.

One reason for care appears in the US rule: restrictions on divulging sensitive security information are a required training topic under 49 CFR 1542.213(b). No text read classifies a test item as sensitive, so do not assume either way. Ask.

A second reason is leakage. Search results for this topic include practice quizzes and pages that advertise answer keys for named airport tests. Local procedures differ, so those answers can be wrong for your site, and using them may break your employer’s or authority’s rules. A larger bank, randomized order and fresh scenarios make memorizing less useful.

Pro tip: Review Every New Item With Your Security Manager. A single well-meaning scenario can reveal how a local control works to everyone who sits the test. Have the person who owns the security program sign off each item before it is delivered, and record who approved it and when.

How do you write scenario items about reporting and incidents?

Write short workplace scenarios that name the situation and ask what the worker does first under your program. Keep distractors plausible but clearly wrong, and let the key point to your program, not to general advice. Our guide to scenario-based multiple-choice questions covers the writing rules.

The three items below are original, illustrative and not taken from any exam, authority or provider material. They are not representative of any official test. In a real bank, name your own reporting contacts and routes.

• Reporting route. “A contractor is working in your area without displaying a pass. Under your airport’s security program, what do you do first?” Options: carry on and assume they were checked, report or challenge as your program instructs, confront them physically, or wait until the end of your shift. The key is whatever your program says.
• Unattended item. “You notice an unattended bag in a staff corridor. Which statement matches your airport’s instruction?” The distractors include handling it yourself and assuming it belongs to a colleague. The key is your program’s instruction and reporting contact.
• Information request. “A friend outside the industry asks which entrances on your site are checked least often. What is the appropriate response under your security program?” The key is to decline to share, and the follow-up your program sets for concerning approaches.

How should you set pass marks, retakes and feedback?

Set the pass mark as a documented policy, not a copied number. The rules read set none, and published programs use 80 to 85 percent. Decide whether some topics, such as reporting, must be answered correctly regardless of the total, and let staff retry after targeted review.

A defensible pass mark comes from a method, not a habit. Our guide to setting cut scores for professional training courses explains how panels judge each item. For a short awareness test, a simple written rule may be enough: the total needed, any items that must be right, and what happens after a fail. Whatever you choose, write it down and apply it the same way to every worker.

For retakes, the published programs differ: one page above allows two attempts, and another sends the learner back through the whole course after a second fail. Your authority may set its own limits, so ask first.

Pro tip: Show Topics, Not Answers. After a failed attempt, tell the worker which topics they missed and which section of the program to reread, but do not show the correct options. That protects the bank and stops answers being passed along the break room.

How often should staff be retested, and what records should you keep?

The EU 11.2.7 and US 1542.213 texts read set no retest interval, though some national programs add one. Check yours. Keep records for the period the rule gives: at least the contract’s duration in the EU text, and 180 days after access ends in the US rule.

Intervals in published pages differ because national programs differ. One Munich Airport Academy page says refresher training is required every 5 years and issues its certificate under the German Aviation Security Training Ordinance. An Australian government page says refresher training is required at least every two years for regulated air cargo agents, accredited air cargo agents and known consignors. Those are examples of national rules, not your rule.

Whatever interval applies, these triggers are sensible additions, though they are this post’s assumption:

• A change of role or access level.
• A revision of the security program sections that items test.
• A security incident or audit finding that points to a knowledge gap.
• Your recurrent cycle; see our post on recurrent testing and renewals for scheduling logic.

For each attempt, record the person, role and access level, date, test version, score, topics missed, outcome, and the security program revision the items tested. Your authority decides what evidence it accepts, so ask what it expects to see.

What does a security awareness test not prove?

It does not prove behavior. A worker can pass and still hold a door open for a stranger, and a team with perfect scores may report nothing. ICAO’s page says an effective security culture makes employees more likely to “identify and report behaviours/activities of concern” (quoted).

Pair the test with other evidence: the number and quality of reports staff file, how quickly concerns are followed up, and supervisor observation. If scores are high and reports are rare, look for what stops people speaking up. Our post on SMS knowledge checks for aviation staff makes the same point for safety reporting.

What should you do next?

Start with your own program. Ask your appropriate authority what content it has approved or specified for awareness training and what evidence of understanding it expects. Then build the blueprint from that content, not from this post, and write the reporting and incident items first.

Have your security manager review each item, pilot the test with experienced staff who did not write it, and fix any item where they disagree on the key. Then write down your pass rule, retake rule, retest triggers and record fields.

On tools: SimpliAssess’s features page lists Item Banking, Tag Management, Test Management, Examinee Management and Analytics & Reporting. It does not describe security awareness or aviation content. SimpliTrain’s aviation page names Assessments & Exams, Question Banks and Proctoring in its platform menu and does not mention security awareness.

Frequently asked questions

What is an airport security awareness test?

It is a scored check that an airport worker understands the security duties linked to their job and access, such as reporting concerns, using their pass correctly and responding to an incident. It follows training, and your national aviation security program and airport decide its content. It is not a screening qualification.

Is a security awareness test required by law for airport staff?

It depends on the country. The EU text read asks each trainee to demonstrate understanding of the subjects before taking up duty, which implies some check. The US text read requires approved training before unescorted access and mentions no exam. Check your appropriate authority for what evidence it expects.

What is the pass mark for an airport security awareness test?

No regulation read sets one. Published programs use their own, for example 80 percent on an IATA course page and 85 percent on an EU 11.2.7 course page, as of November 2026. Your airport, employer or authority sets the mark that applies to your staff, so do not copy another program’s number.

How often do airport staff have to repeat security awareness training?

The EU 11.2.7 and US 1542.213 texts read set no interval for general awareness. National programs do: one Munich Airport Academy page cites 5 years, and an Australian government page sets at least two years for certain cargo security entities. Ask your authority which interval applies to your role and site.

Can airport security awareness tests be taken online?

Often yes, but the rules vary. The EU text read allows computer-based courses once their content is specified or approved by the appropriate authority. Several providers publish unsupervised online tests. No regulator text read approves test software, so confirm with your authority that your online setup produces acceptable evidence.

Where can I find airport security awareness test answers?

This post does not provide answers, and no public key is reliable. Questions and correct options depend on your own airport’s security program, and sites that advertise answer keys may be wrong for your site. Study your airport’s training materials and ask your security training office if something is unclear.