Pass the ASIS Physical Security Professional ASIS-PSP Questions and answers with ExamsMirror

Effective security design must balance technological advances with operational realities, organizational priorities, and human behavior. This holistic approach ensures the system is usable, sustainable, and aligned with company goals.

A (Adversary diagrams) and B (Threats and likelihood) are analytical tools, not integration principles.

D omits the critical “human element,” which affects usability and compliance.

Risk avoidance means eliminating a threat entirely by discontinuing the activity or removing the condition that creates the risk. For example, if transporting valuable goods through a high-risk area poses too much danger, a company might choose to stop shipments through that route altogether.

References from PSP: Risk Treatment Options – ASIS POA; PSP Study Guide – Security Strategy Planning

When designing safety and security countermeasures for an existing (especially aging) facility, the first priority for a Physical Security Professional is to assess the current state of physical security. This includes evaluating doors, locks, windows, barriers, structural access points, and environmental design features.

Understanding what currently exists sets the foundation for integrating other systems like fire detection, access control, and intrusion detection.

Fire detection (A) is critical for life safety but not the first step in physical security design.

Access control (B) and intruder detection (D) are components of the overall physical security system and come after baseline evaluation.

A non-delegable duty is a legal responsibility that cannot be entirely transferred to another party (such as an independent contractor) under agency law. While a company may hire third-party providers, the courts often hold that certain responsibilities—particularly those involving safety and legal compliance—remain with the hiring entity. This is particularly significant in the context of security services, where liability can still rest with the client company even if services are outsourced.

Delegable duty (B) is the opposite and not applicable in this context.

Non-Crime duty (C) is not a recognized legal term.

Staff authority occurs when individuals (such as a chief executive officer or department head) are given delegated authority by their superior but do not sit directly in the operational chain of command. They support line functions by providing recommendations, analysis, and specialized services. Unlike line authority, which involves direct supervision, staff authority enables influence through expertise or policy.

Financial authority (A) pertains to budget control.

Control authority (B) is not a formal organizational term.

Dominance authority (D) is not used in standard management structures.

In the PSP framework, a project specification outlines the technical and operational requirements of a security system. The specification defines what the system must achieve rather than simply its cost or component tolerances.

Performance expectations describe the desired outcomes, functionality, reliability, and operational standards that the installed system must meet.

Testing specifications and equipment tolerances support validation but are derived from the performance requirements.

Cost is a budgetary consideration and does not determine functional or operational requirements.

By clearly specifying performance expectations, security planners ensure that the system is designed and implemented to meet operational needs, provide measurable results, and comply with organizational standards, consistent with ASIS PSP guidance.

After a risk assessment is completed, the first step for a project manager is to create a concept design. This outlines the proposed system and supports budget justification and strategic alignment with management’s objectives. Gaining senior management buy-in is essential before progressing to detailed design or procurement.

A (RFI) may follow concept approval.

C (Construction documents) are created much later.

D (Implementation planning) is dependent on approved design and funding.

Record safes are designed primarily to protect documents from fire, not theft. They often lack adequate burglary resistance features. Using record safes for storing valuables such as cash, jewelry, or sensitive items prone to theft is a major security vulnerability. This misapplication can lead to easy compromise during unauthorized access or burglary.

???? References:

ASIS International, Protection of Assets (POA), Chapter: Asset Protection and Safes

ASIS PSP Study Guide, Physical Security Devices

A suicide attack is a tactic where the attacker intentionally sacrifices their life to ensure the success of the mission. This is seen in tactics such as suicide bombings or vehicle-borne IEDs. It is used to maximize impact, instill fear, and often guarantees media attention.

Effective risk mitigation requires proportional countermeasures. As threats become more advanced or sophisticated, security measures must also be upgraded accordingly. If not, the residual risk must be transferred, avoided, or accepted.

A and B are incorrect because they imply static or uniform responses to dynamic threats.

C is overly narrow; system performance depends on multiple factors, not just departmental capability.