ASIS CPP preparation guide

The CPP exam is split into 7 Domains. This course aligns strictly with those domains, breaking down the specific “Tasks” defined by ASIS into teachable lessons.

Course Overview: The ASIS CPP Preparation Program

• Target Audience: Security managers with 5-7+ years of experience.
• Primary References: ASIS Protection of Assets (POA) Manuals & ASIS Standards.
• Goal: Pass the 225-question multiple-choice exam.

Module 0: Course Introduction & Strategy

• Lesson 0.1: The CPP Certification: Requirements, Application, and Ethics.
• Lesson 0.2: The Exam Structure: Scoring, Domain Weighting, and Time Management.
• Lesson 0.3: Study Resources: Navigating the POA Manuals and ASIS Standards.

Module 1: Security Principles and Practices (22%)

Focus: The theoretical and managerial foundation of a security program.

• Lesson 1.1: Planning, Organization, and Control of Security Programs.
• Lesson 1.2: Security Theory & Process (Crime Prevention theory, CPTED basics).
• Lesson 1.3: Risk Management Fundamentals (ASIS GDL ESRM).
  • Topic: Enterprise Security Risk Management (ESRM).
  • Topic: Conducting Quantitative vs. Qualitative Risk Assessments.
• Lesson 1.4: Policy & Procedure Development.
• Lesson 1.5: Managing External Relations (Law enforcement, emergency services, liaison).
• Lesson 1.6: Security Ethics & Compliance (Code of Conduct).

Module 2: Business Principles and Practices (15%)

Focus: Speaking the language of the C-Suite—finance, contracts, and leadership.

• Lesson 2.1: Financial Principles for Security Managers.
  • Topic: Budgets (OpEx vs. CapEx), ROI, and Cost-Benefit Analysis.
• Lesson 2.2: Business Operations & Reporting.
• Lesson 2.3: Human Resource Management in Security.
  • Topic: Hiring, Performance Reviews, and Retention Strategies.
• Lesson 2.4: Managing Contracts & Service Level Agreements (SLAs).
• Lesson 2.5: Corporate Governance & Strategic Planning.

Module 3: Investigations (9%)

Focus: The management of investigative processes, not just “detective work.”

• Lesson 3.1: Investigation Management.
  • Topic: Case Management, Protocols, and Objectives.
• Lesson 3.2: Evidence Collection & Preservation (Chain of Custody).
• Lesson 3.3: Surveillance Techniques & Technology.
• Lesson 3.4: Investigative Interviewing (Methods, Legal Constraints).
• Lesson 3.5: Specialized Investigations (Fraud, Internal Theft, Whistleblowers).
• Lesson 3.6: Legal Support (Testimony, Depositions, Report Writing).

Module 4: Personnel Security (11%)

Focus: Protecting people and ensuring the trustworthiness of the workforce.

• Lesson 4.1: Background Screening & Vetting (Pre-employment & Continuous).
• Lesson 4.2: Executive Protection (EP) Operations.
• Lesson 4.3: Workplace Violence Prevention (ASIS WVPI Standard).
  • Topic: Threat Assessment Teams & Intervention.
• Lesson 4.4: Security Awareness Training & Education Programs.

Module 5: Physical Security (16%)

Focus: The “Hard” security measures—barriers, lights, locks, and sensors.

• Lesson 5.1: Physical Security Assessments & Surveys.
• Lesson 5.2: Physical Security Design Principles.
  • Topic: Deter, Detect, Delay, Deny.
• Lesson 5.3: Structural Security Measures (Barriers, Lighting, Locks, Windows).
• Lesson 5.4: Electronic Security Systems (ESS).
  • Topic: Access Control Systems (ACS).
  • Topic: Video Surveillance (CCTV) & VMS.
  • Topic: Intrusion Detection Systems (IDS).
• Lesson 5.5: Security Officer Operations (Post orders, patrol).

Module 6: Information Security (14%)

Focus: Protecting proprietary data and integrating with cybersecurity.

• Lesson 6.1: Information Security Program Management (CIA Triad).
• Lesson 6.2: Intellectual Property (IP) Protection.
  • Topic: Trade Secrets, Patents, Copyrights.
• Lesson 6.3: Information Loss Prevention Strategies.
• Lesson 6.4: Convergence: Physical vs. Logical Security.
• Lesson 6.5: Network Security Fundamentals for Physical Security Managers.

Module 7: Crisis Management (13%)

Focus: Responding to and recovering from emergencies.

• Lesson 7.1: Crisis Management Planning (CMP).
• Lesson 7.2: Business Continuity Planning (BCP).
  • Topic: Business Impact Analysis (BIA).
• Lesson 7.3: Emergency Response Procedures (Evacuation, Shelter-in-Place).
• Lesson 7.4: Disaster Recovery & Post-Crisis Restoration.
• Lesson 7.5: Crisis Communication & Media Relations.

Module 8: The ASIS Standards (Crucial Add-on)

The exam frequently references specific ASIS Standards. This module reviews them in depth.

• Lesson 8.1: Chief Security Officer (CSO) Standard.
• Lesson 8.2: Security Management Standard.
• Lesson 8.3: Workplace Violence Prevention and Intervention (WVPI).
• Lesson 8.4: Risk Assessment Standard (RA).
• Lesson 8.5: Investigations Standard (INV).

Module 9: Final Review & Simulation

Lesson 9.4: Final Gap Analysis & Weakness Review.

Lesson 9.1: Exam Taking Strategies (Flagging questions, identifying distractors).