A 1971 Rand Corporation study found that most security training consisted of telling security officers to use common sense, not to smell of alcohol, and to stay awake on the job. A March 1980 position paper noted that private security training focuses more on hardware than on training issues. However, new forms of legal action are appearing that will affect security. Negligence in training is a basis for suits against both public and private security officials. Contracting with an outside firm to provide security services does not eliminate a company's liability. In addition, private security officers may be liable under the Civil Rights Act. Seven theories of vicarious liability apply to police officers, to private security officers, and to their employers: negligent appointment, negligent retention, negligent assignment, negligent entrustment, failure to supervise properly, failure to direct, and failure to provide necessary training. In public police agencies, officers are increasingly suing their own supervisors. Unfortunately, much current security training consists only of classroom lectures and textbook theory. However, it is essential for student officers to practice, demonstrate, and reproduce the skills learned in the classroom. Training should emphasize learning by doing and should include performance measurement and maintenance of performance records. It is also crucial that security trainers be qualified both in the subject matter and in training methods.