Free ASIS-PSP Practice Test Questions and Answers (2026)

Exclusion areas represent the highest level of security within a layered physical protection system. They are typically located inside limited areas and are designated for the most critical assets. Access is strictly controlled and restricted to the absolute minimum number of personnel with a specific, authorized need to be there. This stringent level of control makes them the appropriate designation for zones used exclusively for handling and storing high-value cargo, where the risk of theft or damage is greatest and the consequences are most severe.

A. Limited areas: These are controlled spaces with access restrictions, but they are less secure than exclusion areas and may house a wider variety of assets, not just the highest-value ones.
C. Multiple areas: This is a general term describing a security layout (e.g., layered security) and not a specific classification of a high-security zone.
D. None of the above: This is incorrect because "Exclusion areas" is the precise and standard term used in physical security for this specific purpose.

1. ASIS International. (2021). Protection of Assets: Physical Security. Alexandria

VA: ASIS International. In the chapter on "Physical Security Measures

" the text describes the hierarchy of security areas

defining an exclusion area as the most stringently controlled space for the most valuable assets (Section 3.4.2

"Types of Security Areas").

2. Garcia

M. L. (2008). The Design and Evaluation of Physical Protection Systems (2nd ed.). Butterworth-Heinemann. Chapter 4

"Delay

" discusses the concept of layered defense

where exclusion areas (sometimes called vital areas) are the innermost layer protecting the most critical targets.

3. U.S. Department of Energy. (2016). Physical Protection (DOE O 473.3A). Washington

D.C.: U.S. Government. This official standard outlines requirements for protecting assets

defining limited areas and exclusion areas with distinct levels of access control

with exclusion areas reserved for the most sensitive materials or components (Attachment 2

"Definitions").

Private security is the industry composed of non-governmental, commercial entities and individuals providing protective services to specific clients on a contractual or for-fee basis. This sector is distinct from public security (i.e., law enforcement), which is government-funded and serves the general public. The definition in the question, which includes self-employed individuals, businesses, specific clientele, and payment for services, accurately and comprehensively describes the private security industry.

A. Public security: This refers to security services provided by government agencies (e.g., police) for the general population and funded by taxes, not by specific clients for a fee.
C. Security firm: This is a component of the private security industry but is too narrow. The term "private security" is broader and correctly includes both security firms and self-employed individuals.
D. Security function: This describes the role and activities of security within an organization (e.g., access control, risk management), not the commercial industry that provides these services.

1. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. In Chapter 1

"The History and Scope of Security

" private security is defined as "The private-sector practice

by individuals and organizations

of providing security-related means or services to protect and preserve persons

property

and information" (p. 4). This aligns with the question's description of individuals and organizations providing services.

2. ASIS International. (2012). Protection of Assets (POA)

Security Management. Chapter 1

"The Evolution of Security Management." This chapter details the scope of the private security industry

distinguishing it from public law enforcement by its focus on private interests

specific clientele

and its commercial

for-profit nature. It covers the range from individual consultants to large contract security corporations.

3. Nemeth

C. P. (2010). Private Security and the Law (4th ed.). CRC Press. In Chapter 1

"An Introduction to Private Security

" the author defines the industry by its private funding and its role in protecting the assets of specific clients

contrasting it with the public mandate of government law enforcement (pp. 3-5).

Case law is the body of law derived from judicial decisions of courts and similar tribunals. In a common law system, which is based on English traditions, judicial decisions create binding precedents under the principle of stare decisis. When courts interpret and apply specific legislation (statutory law), their rulings also become part of the case law, establishing how those statutes are to be understood and enforced in practice. Therefore, the ongoing process of judicial decision-making, whether based on traditional common law principles or the interpretation of statutes, results in the creation of case law.

A. Criminal law: This is a specific substantive area of law that deals with crime and punishment, not the overall body of law created by judicial precedent.
B. Offended suit: This is not a recognized legal term. Civil actions are typically referred to as lawsuits or civil suits, initiated by a plaintiff against a defendant.
D. Constitution law: This is the fundamental law that establishes the structure and powers of a government. It is a source of law, not the general result of applying common and statutory law in courts.

1. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. In Chapter 4

"The Legal Basis of Security

" the text explains the sources of law in the United States

stating

"The primary sources of law... are constitutions

statutes

administrative regulations

and cases (the common law)." It clarifies that case law is created when judges interpret constitutions and statutes.

2. ASIS International. (2021). Protection of Assets (POA). In the "Security Management" volume

the chapter on "Legal Aspects of Security" discusses the sources of legal obligations. It differentiates between statutory law (created by legislatures) and common law (or case law)

which is developed through judicial decisions over time. The text establishes that the application and interpretation of both by courts form the body of case law that guides security practices. (Specific section: Legal Foundations).

3. Cornell Law School Legal Information Institute (LII). (n.d.). Case Law. Retrieved from https://www.law.cornell.edu/wex/caselaw. The LII defines case law as "law that is based on judicial decisions rather than law based on constitutions

statutes

or regulations." It further explains that case law concerns the judicial interpretation of those other sources of law.

The question refers to the skills approach to leadership, a widely accepted model most famously articulated by Robert Katz. This model posits that effective leadership depends on three core skill sets: technical, human, and conceptual. "Human relations" is synonymous with human skills. "Conceptual" skills are a core category in the model. The "Skill Mix" is the principle that the relative importance of these three skills changes depending on the leader's level within an organization (e.g., top-level, middle, or supervisory). Since all the listed options are integral components of this foundational leadership classification framework, "All of the above" is the most comprehensive and correct answer.

A. Skill Mix: This option is incomplete. While the "Skill Mix" is a key concept within the framework, it does not represent the entire classification of skills on its own.
B. Conceptual: This is only one of the three core skill categories identified in Katz's model. Selecting it alone omits the other essential components of the theory.
C. Human relations: This represents only the "human skills" category. It is a crucial part of the model but is not the complete classification.

1. Katz

R. L. (1974). Skills of an effective administrator. Harvard Business Review

52(5)

90–102. In this seminal article

Katz introduces the three-skill approach—technical

human

and conceptual—and discusses how their importance (the "skill mix") varies by management level.

2. Northouse

P. G. (2021). Leadership: Theory and practice (9th ed.). Sage publications. Chapter 3

"Skills Approach

" details Katz’s Three-Skill Approach

explicitly defining conceptual and human skills and explaining the skill mix across management hierarchies (pp. 46-48).

3. ASIS International. (2021). Protection of Assets (POA). Alexandria

VA: ASIS International. The "Business Principles and Practices" domain within the POA covers foundational management theories

including the skills approach to leadership

which encompasses conceptual skills

human relations

and the appropriate skill mix for security managers.

The statement is an oversimplification and therefore false. While pandemics directly affect human health, they have significant and severe indirect impacts on infrastructure. Critical infrastructure systems—such as power grids, water treatment facilities, telecommunications, and transportation networks—are dependent on human operators for functioning, maintenance, and repair. Widespread illness and absenteeism during a pandemic can lead to a degradation of services or even catastrophic failure of these systems. Furthermore, pandemic-related disruptions to global supply chains can halt the delivery of essential parts and materials needed for infrastructure maintenance.

A. True: This option is incorrect because it fails to recognize the critical dependency of infrastructure on a healthy and available workforce, which is the primary target of a pandemic.

1. ASIS International. (2021). Protection of Assets (POA). Alexandria

VA: ASIS International. In the "Crisis Management" volume

the section on "Pandemic Planning" details how high absenteeism rates among essential personnel can severely disrupt or disable the operations of critical infrastructure

demonstrating a clear cause-and-effect relationship.

2. U.S. Department of Homeland Security

Cybersecurity & Infrastructure Security Agency (CISA). (2021). Guidance on the Essential Critical Infrastructure Workforce. Version 4.0. This entire guidance document is predicated on the fact that a pandemic directly threatens the continuity of critical infrastructure by incapacitating its essential workforce. It outlines the need to protect these workers to ensure the "functions of government and the private sector... are not compromised" (p. 2).

3. University of Minnesota

Center for Infectious Disease Research and Policy (CIDRAP). (2008). Business Planning for Pandemic Influenza: A Guide for Small- to Mid-Sized Businesses. This guide

while focused on businesses

outlines the cascading effects of pandemics

stating

"During a pandemic

high rates of absenteeism will affect all businesses and services... including utilities (electricity

gas

water

and sewer)

transportation (gasoline and public transit)

and communications (telephone and Internet)" (p. 5). This confirms the direct link between personnel loss and infrastructure impact.

A successful hybrid security operation effectively integrates proprietary (in-house) and contract security personnel. Its success is contingent upon a synergistic relationship between the client organization and the service provider. This requires an engaged corporate liaison to ensure clear communication, alignment of goals, and operational integration. Consistent contract management support is crucial for enforcing service level agreements (SLAs), managing costs, and ensuring the provider meets its obligations. Finally, accurate quality measurements, such as Key Performance Indicators (KPIs), are essential to objectively evaluate the performance of both the in-house and contract components, ensuring standards are met and demonstrating the program's value. All three elements are indispensable.

A. This is a critical component, but a good hybrid operation also requires effective contract management and quality measurement to be successful.
B. This is a vital function, but it is insufficient without a strong corporate liaison and a system for measuring performance.
C. This is essential for evaluation, but without proper liaison and contract management, the operation itself will likely be flawed.

1. Fay

J. (Ed.). (2012). Protection of Assets (POA). ASIS International. In the "Security Management" volume

the section on "Managing Contract Security Services" emphasizes that a successful partnership (as in a hybrid model) requires a designated client representative (liaison)

rigorous contract administration

and clear performance metrics to measure service quality. (Specific content found in chapters covering Security Personnel and Management).

2. ASIS International. (2019). Managing Security Services: A Practical Guide. This guide details the best practices for managing outsourced security

a key part of any hybrid model. It explicitly outlines the need for a dedicated liaison

robust contract management processes

and the development of Key Performance Indicators (KPIs) for quality assurance. (See sections on Client-Provider Relationship and Performance Measurement).

3. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. Chapter 11

"Security Personnel

" discusses the various models of security staffing

including hybrid approaches. The text highlights that the effectiveness of using contract services alongside proprietary staff depends heavily on the client's ability to manage the contract

maintain open communication channels (liaison)

and implement a quality control program. (ISBN: 978-0128148595).

A Request for Proposal (RFP) is the appropriate procurement method when an owner defines a problem or a need through functional requirements and performance specifications, but does not provide a detailed design. The RFP process invites contractors to propose a comprehensive solution, which includes designing the system to meet the stated requirements and then building it. This approach, often referred to as "design-build" or "performance-based" procurement, places the responsibility for both the technical design and the physical implementation on the contractor, based on the customer's operational goals.

A. Invitation for bid: This method is used when the customer provides a complete and detailed design (prescriptive specifications), and contractors bid only on the cost of construction.
C. Solicitation offer: This is a general term for the process of requesting and receiving offers; it is not a specific type of procurement method like an RFP or IFB.
D. Request for quote: An RFQ is typically used for acquiring common, off-the-shelf goods or simple services where the requirements are standardized and the primary decision factor is price.

1. ASIS International. (2021). Protection of Assets (POA)

Physical Security volume. In the chapter on "Security Project Management

" the text distinguishes between procurement methods. It specifies that a Request for Proposal (RFP) is used with performance-based specifications

where the contractor is responsible for the design based on the owner's functional requirements. In contrast

an Invitation for Bid (IFB) is used with prescriptive specifications

where the design is provided by the owner. (Section: "Procurement and Contracting").

2. U.S. General Services Administration (GSA). (n.d.). Design and Construction Procurement. The GSA documentation outlines that the Design-Build project delivery method

where a single contract covers both design and construction

is typically solicited through a Request for Proposal (RFP) process. This aligns with the scenario of a contractor designing and building based on functional needs. (Reference: GSA Acquisition Manual (GSAM)

Part 536

"Construction and Architect-Engineer Contracts").

3. Project Management Institute. (2017). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) (6th ed.). Section 12.1.3.3

"Procurement Documentation

" describes a Request for Proposal (RFP) as a document used to solicit proposals when "there is a problem in the project and the solution is not easy to determine." This necessitates the seller proposing a solution

which inherently includes design work.

Credit reports are a standard component of pre-employment background screening used to assess an applicant's financial responsibility and stability. They contain detailed information about an individual's debt, payment history, and public financial records like bankruptcies or liens. In addition to financial data, these reports compile personal identifying information collected from credit applications over time, which includes a history of past addresses and often lists current and previous employers. This makes them a dual-purpose tool for verifying both financial standing and personal history.

A. Legal reports: These reports focus on an individual's interaction with the justice system, such as criminal records or civil litigation, not their overall financial health or address history.
C. Status reports: This is a generic term for progress updates in a business or project context and is not a recognized type of background investigation report.
D. Miscellaneous reports: This term is too vague and non-specific. It does not describe a standard, defined document used in personnel security screening.

1. ASIS International

Protection of Assets (POA): Security Management. Alexandria

VA: ASIS International

2012

Chapter 4

"Preemployment and Background Investigations

" pp. 215-217. This chapter details the components of a background check

explaining that a credit history check is used to "determine the applicant's sense of financial responsibility" and can also be used to verify information such as previous addresses and employers listed on an application.

2. Fennelly

L. J.

& Perry

M. A. The CPO’s Guide to Personnel Management. Butterworth-Heinemann

2014

Chapter 3

"Pre-Employment Screening

" p. 41. This academic security management text states

"A credit report can provide a wealth of information

including previous addresses

past and present employers

and any legal judgments... It is an excellent tool for verifying information provided on the employment application."

3. U.S. Federal Trade Commission (FTC). "Using Consumer Reports: What Employers Need to Know." This official guidance document explains the Fair Credit Reporting Act (FCRA) and details the contents of consumer reports (including credit reports) used for employment purposes. It confirms that these reports contain information about a person's "credit characteristics" as well as personal history data. The document is available on the official FTC.gov website.

A Business Impact Analysis (BIA) is the foundational process in business continuity and resilience planning. Its primary objective is to identify an organization's critical functions and processes and then determine the potential impacts resulting from a disruption to them. The BIA systematically assesses both quantitative (e.g., financial loss) and qualitative (e.g., reputational damage) impacts over time. This analysis allows management to prioritize functions for recovery, establish Recovery Time Objectives (RTOs), and set Recovery Point Objectives (RPOs). The findings of the BIA are essential for making informed decisions and developing appropriate recovery strategies.

A. The budget for the program: The BIA provides critical data to justify the budget, but it does not determine the final budget itself; that is a subsequent management decision.
B. How to best allocate personnel resources during a disaster: This is a tactical component of the Business Continuity Plan (BCP), which is developed after the BIA identifies which functions need recovery.
C. The number of hot sites: The need for and number of hot sites is a specific recovery strategy decision that is made based on the RTOs identified in the BIA.

1. ASIS International, "Protection of Assets (POA)," Business Continuity volume, 2021. In Chapter 2, "Business Impact Analysis," it is stated, "The BIA is a process designed to identify critical business functions (CBFs) and to quantify the impact of a disruption of these functions... The BIA provides the data from which appropriate recovery strategies can be determined and implemented." This directly supports that the primary purpose is identifying critical functions.

2. National Institute of Standards and Technology (NIST) Special Publication 800-34 Rev. 1, "Contingency Planning Guide for Information Technology Systems," September 2010. Section 3.2, "Business Impact Analysis," states: "The BIA purpose is to correlate specific system components with the critical services that they provide, and based on that information, to characterize the consequences of a disruption to the system components." This emphasizes the identification of critical elements and the impact of their loss.

3. ASIS International, "Organizational Resilience: Security, Preparedness, and Continuity Management Systems—Requirements with Guidance for Use" (ASIS SPC.1-2009). Section 4.4.1.3, "Risk Assessment," requires that the organization shall "identify activities that support the provision of its products and services and the impact of their disruption." This aligns directly with the core purpose of a BIA as identifying critical functions/activities.

The security services industry is trending towards greater professionalization. This includes establishing and regulating training and standards to ensure competency (A) and attracting better-qualified individuals through improved compensation, career paths, and screening (B). However, a general trend to disarm security personnel is not accurate. The decision to arm security personnel is a critical, situation-dependent choice based on a thorough threat, vulnerability, and risk assessment. While some situations may call for unarmed personnel, many high-risk environments require a trained, armed presence, and the trend is toward more rigorous training and selection for these roles, not wholesale disarmament.

A. Regulate training and standards: This is incorrect because establishing formal regulations, certifications, and standards for training is a fundamental trend in the professionalization of the security industry.
B. Attract better qualified individuals: This is incorrect because a key industry trend is to improve the quality of security personnel by offering better compensation and career opportunities to attract more skilled and educated candidates.
D. All of the above: This is incorrect because options A and B are well-established trends within the security services sector.

1. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann.

Chapter 4

"The Role of the Security Officer

" discusses the increasing demand for higher-quality

better-trained personnel and the move towards professionalization and standardization. It frames the decision to arm officers as a function of specific risk analysis

not as a general trend toward disarmament.

2. ASIS International. (2021). Protection of Assets (POA) Bundle.

The Security Management volume

in its sections on Security Personnel Management

emphasizes the ongoing professionalization of the security field. It details the importance of robust selection

screening

and training programs to enhance the quality of security officers

directly supporting options A and B as major trends. The text treats the use of armed officers as a specific risk mitigation strategy

contingent on legal authority and documented need

rather than a practice subject to a general trend of elimination.

3. Koo

J. H. (2018). The Professionalization of Private Security. Journal of Applied Security Research

13(3)

335-350. https://doi.org/10.1080/19361610.2018.1463981

This article discusses the evolution of the private security industry

highlighting the push for higher educational standards

mandatory licensing

and standardized training as key indicators of professionalization (supporting A and B). It does not identify a trend toward disarmament; rather

it discusses the specialization of roles

including highly trained armed personnel.

Physical barriers are a fundamental component of a Physical Protection System (PPS) and are designed to counter the three primary methods of adversarial penetration: stealth, deception, and force. Stealth: An adversary attempts to bypass a barrier without being detected. Deception: An adversary uses trickery, such as false credentials or impersonation, to be granted authorized passage through a control point in a barrier. Force: An adversary uses overt, physical power (with or without tools) to breach the barrier itself. A comprehensive security design evaluates a barrier's effectiveness against all three of these distinct attack vectors.

A. Accident, force, and stealth: "Accident" is not an intentional, adversarial method of penetration; security systems are designed to counter deliberate threats.
B. Force, stealth, and tools: "Tools" are instruments used to carry out force or stealth attacks, not a separate category of penetration.
C. Vehicle, stealth, and force: A "vehicle" is a specific instrument used to apply force; it is a subset of the force category, not a distinct type.

1. Garcia, M. L. (2008). The Design and Evaluation of Physical Protection Systems (2nd ed.). Butterworth-Heinemann. In Chapter 3, "Analysis of Physical Protection Systems," the text states, "An adversary attempts to defeat a PPS element by force, stealth, or deceit." (p. 31).

2. ASIS International. (2021). Protection of Assets: Physical Security. In the chapter on "Physical Barriers and Controls," the text outlines that barriers are designed to delay or prevent adversaries attempting to penetrate a facility using force, stealth, or deception. (Section 3.2.1, Adversary Tactics).

3. Fennelly, L. J., & Perry, M. A. (Eds.). (2021). The Handbook for Security Practitioners and Managers: The ASIS Security Professional's Reference. ASIS International. Chapter 4, "Physical Security," discusses that physical security measures are implemented to counter threats that manifest as attacks of force, stealth, or deceit. (p. 57).

The statement is false. The number of security personnel required is generally directly proportional to the size of the facility and the number of employees. As a facility's physical area (square footage or acreage) and population increase, so do the security requirements. Larger areas require more personnel for adequate patrol coverage, surveillance monitoring, and response. Similarly, a higher number of employees and visitors increases the complexity of access control, monitoring, and potential for security incidents. Therefore, an increase in facility size or population typically necessitates an increase, not a decrease, in security staffing to maintain an effective security posture.

A. True: This is incorrect because an inverse relationship would mean that as a facility gets larger, it would require fewer security personnel, which contradicts fundamental principles of security resource allocation and risk management.

1. Fennelly

L. J.

& Perry

M. A. (Eds.). (2018). The Protection of Assets (POA). ASIS International. In the "Physical Security" volume

the chapter on "Security Officers" discusses that staffing levels are determined by a comprehensive analysis of the facility's characteristics

including its size

complexity

and the nature of the operations. Larger and more complex sites are explicitly noted as requiring more significant security resources

including personnel. (Specific section: Physical Security volume

Chapter on Security Force Operations

Section on Post Orders and Staffing).

2. ASIS International. (2019). Physical Security Measures Guideline (ASIS GDL-PSM-2019). Section 6.3

"Determining the Physical Security Measures

" outlines that measures should be based on a risk assessment that considers the characteristics of the asset or facility

including its size and the environment. The scale of the security measures

including personnel

is directly related to the scale and complexity of the environment being protected.

3. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. Chapter 7

"Physical Security I: The Outer Defenses

" explains that the extent of physical security measures

including guard forces

is dictated by the size of the perimeter and the area that needs to be secured

establishing a direct

not inverse

relationship.

Proprietary security services, also known as in-house security, refer to a security force that is a direct part of the organization it protects. The security personnel are employees of the company, managed by the company's own security department. This model provides the organization with direct control over hiring, training, supervision, and operational deployment. The loyalty of the security staff is directly to the employer, and the security function can be closely integrated with the organization's culture and overall mission.

B. Security enforcement: This is a general term describing the function or activity of applying security rules and procedures, not the employment model of the security force.
C. Pilferage: This term refers to the act of stealing small items or in small quantities; it is a type of security threat, not a type of security service.
D. Contract security services: This is the alternative model where an organization hires a specialized third-party company to provide security personnel and related services.

1. ASIS International. (2021). Protection of Assets: Security Management. Alexandria

VA: ASIS International. In the chapter "Managing the Security Function

" the text distinguishes between proprietary and contract security models

defining the proprietary model as one where security staff are employees of the protected organization. (Specific section on Proprietary vs. Contract Security).

2. Fennelly

L. J. (2017). Effective Physical Security (5th ed.). Butterworth-Heinemann. Chapter 10

"Security Personnel

" explicitly defines a proprietary security force as one that is "owned and operated by the company" it protects

contrasting it directly with contract services.

3. Sennewald

C. A.

& Baillie

C. (2015). Effective Security Management (6th ed.). Butterworth-Heinemann. Chapter 7

"Contract or Proprietary Security Officers?

" details the characteristics of a proprietary force

stating

"The proprietary officer is an employee of the company... The company is responsible for all of the administrative and support functions for these employees" (p. 69).

Specifications are considered the cornerstone of a construction project because they are the detailed, written documents that define the qualitative requirements. They describe the materials, equipment, workmanship standards, installation methods, and operational performance criteria for the work. While drawings illustrate the location, dimensions, and quantity of work, the specifications define its character and quality. Together, they form the core of the contract documents, but the specifications provide the legally enforceable details that ensure the project meets its intended function and quality standards.

A. Drawings: Drawings show what is to be built and where, but they do not define the quality of materials or workmanship, which is the function of the specifications.
B. Guidelines: Guidelines are general recommendations or best practices; they are typically not mandatory and lack the detailed, legally binding nature of specifications.
C. Procedures: Procedures are step-by-step instructions for performing specific tasks during construction. They are derived from the requirements set forth in the specifications and drawings.

1. ASIS International. (2021). Protection of Assets: Physical Security. Alexandria

VA: ASIS International. In the chapter on "Security Project Management

" the text details the development of construction documents

emphasizing that specifications provide the narrative and technical requirements that govern quality and performance

forming a critical part of the contractual agreement.

2. Garcia

M. L. (2008). The Design and Evaluation of Physical Protection Systems (2nd ed.). Butterworth-Heinemann. Chapter 10

"Documentation

" clarifies that specifications are essential for defining the precise performance and material requirements for security components

which is fundamental for procurement

installation

and final acceptance testing.

3. Chitkara

K. K. (2014). Construction Project Management: Planning

Scheduling and Controlling. Tata McGraw-Hill Education. Chapter 4

"Contracts and Specifications

" identifies specifications as a key part of the contract documents that provide a detailed description of work

materials

and workmanship

serving as the foundation for bidding and execution.

Conditional honesty is a behavior exhibited by individuals who act honestly not from an intrinsic moral compass, but from a rational calculation that the risks of being caught are too high. This behavior is a direct "product of reasoning" where the individual weighs the potential gains of dishonesty against the "fearing the consequences" of detection and punishment. Therefore, their honesty is conditional upon the presence of effective controls and the perceived certainty of being caught. This concept is a cornerstone of deterrence theory within security and criminology.

A. Speech honesty: This is a specific form of honesty related to verbal communication and does not encompass the underlying motivation of fear.
C. Integrity: This describes unwavering adherence to moral and ethical principles, regardless of the risk of being caught. It is the opposite of conditional behavior.
D. Conduct: This is a general term for a person's behavior and lacks the specificity regarding the motivation (fear) and cognitive process (reasoning) described.

1. ASIS International

Protection of Assets (POA)

Security Management volume

2021. The principles of personnel security and internal threat mitigation are discussed throughout this volume. The concept of deterrence relies on creating a fear of consequences

which influences the behavior of conditionally honest individuals. This is contrasted with individuals with high integrity who are honest regardless of controls. (Specific chapter on Personnel Security).

2. Fennelly

L. J.

& Perry

M. A. (2018). The Criminology of Security. CRC Press. Chapter 3

"Deterrence and Choice: The Rational Offender

" explains that deterrence theory is based on the premise that individuals are rational actors who weigh the costs and benefits of their actions. The fear of consequences (cost) deters crime

which directly aligns with the definition of conditional honesty.

3. Paternoster

R. (2010). "How Much Do We Really Know About Criminal Deterrence?" The Journal of Criminal Law and Criminology

100(3)

765-824. This academic review discusses the foundations of deterrence theory

emphasizing that the perception of punishment risk (i.e.

fearing the consequences of being caught) is a rational calculation that influences behavior. This supports the idea that such behavior is a "product of reasoning." (Available via university libraries and JSTOR).

Substantive law is the body of law that creates, defines, and regulates the rights, duties, and obligations of individuals and entities. It governs how people are expected to behave in society and includes both civil law (e.g., torts, contracts) and criminal law, which specifies punishments for offenses. This type of law establishes the substance of legal rights and responsibilities, directly addressing the core of the question regarding the relationships between individuals.

A. Procedural law: This governs the mechanics and process of how a legal case flows through the court system, rather than defining the actual rights and duties of the parties.
B. Statutes suit: This is not a recognized legal term. A statute is a law enacted by a legislature, and a suit is a legal action, but "statutes suit" is not a category of law.
D. Constructive law: This is not a standard classification of law. The term "constructive" is a legal qualifier (e.g., constructive notice), but it does not define a broad area of law like substantive law.

1. ASIS International. (2021). Protection of Assets: Security Management. Alexandria

VA: ASIS International. In the section discussing legal aspects

the distinction is made between substantive law

which defines crimes and civil wrongs

and procedural law

which outlines the legal process. Substantive law is presented as the foundation for individual rights and duties. (Specific reference typically found in chapters on Legal Aspects or Investigations).

2. Cornell Law School Legal Information Institute (LII). (n.d.). Substantive Law. Wex Legal Dictionary. Retrieved from https://www.law.cornell.edu/wex/substantivelaw. The LII defines substantive law as "the set of laws that governs how members of a society are to behave... Substantive law defines rights and responsibilities in civil law

and crimes and punishments in criminal law."

3. Garner

B. A. (Ed.). (2019). Black's Law Dictionary (11th ed.). Thomson Reuters. Substantive Law is defined as "The part of the law that creates

defines

and regulates the rights

duties

and powers of parties." This contrasts with procedural law

defined as "The rules that prescribe the steps for having a right or duty judicially enforced."

Contingency planning programs are fundamentally structured around the operational resources required to maintain or recover business functions. The core categories for planning are the tangible and procedural assets that enable operations: people (personnel), processes (business workflows, supply chains), and infrastructure (facilities, technology, utilities). While the impact on a business's reputation is a critical consideration and a major driver for developing a robust contingency program, it is considered a consequence of an operational failure rather than a foundational planning category itself. Plans to manage reputational damage are typically addressed within a crisis management or crisis communications framework, which works in concert with the operational contingency plan.

A. those that impact the business infrastructure: This is incorrect. Contingency plans must address the loss or degradation of physical facilities, IT systems, and utilities, which constitute the business infrastructure.
B. those that impact the people: This is incorrect. Planning for the safety, availability, and alternate roles of personnel is a fundamental component of any contingency program.
C. those that impact the processes: This is incorrect. The recovery of critical business processes and the management of supply chain disruptions are central objectives of contingency planning.

1. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. In Chapter 15

"Emergency Management and Business Continuity

" the text outlines the Business Impact Analysis (BIA) which identifies critical business functions and the resources they depend on

typically categorized as people

facilities/technology (infrastructure)

and processes. Reputational harm is discussed as an impact of a disruption

not a resource category for planning.

2. ASIS International. (2009). Business Continuity Guideline: A Practical Approach for Emergency Preparedness

Crisis Management

and Disaster Recovery. ASIS International. Section 4

"Business Impact Analysis

" details the process of identifying critical processes and the resources required to support them

which are consistently grouped into categories like personnel

facilities

technology

and suppliers (representing people

infrastructure

and processes).

3. FEMA. (2018). Continuity Guidance Circular (CGC). This federal guidance for continuity planning structures plans around Essential Functions and the resources needed to perform them

including Personnel

Communications

Facilities

and Essential Records

which align directly with the categories of people

processes

and infrastructure. Reputational issues are outcomes to be managed

not planning pillars.

The four stages listed—Feasibility, Design, Execution, and Closeout—represent the standard lifecycle of a physical security project as recognized within the ASIS framework. The process begins with the Feasibility stage to determine the project's viability and define its scope. This is followed by the Design stage, where detailed plans, specifications, and construction documents are created. The Execution stage involves the procurement, installation, and implementation of the security measures based on the design. Finally, the Closeout stage includes system testing, commissioning, client acceptance, final documentation, and formal project completion. This sequence provides a structured and logical progression from concept to a fully operational system.

A. Feasibility, development, examination, and closeout: "Examination" is not a standard term for a project management phase; "Execution" or "Implementation" is the correct terminology for carrying out the project plan.
B. Feasibility, development, execution, and completion: "Completion" is an outcome, but "Closeout" is the formal phase that includes completion, final payments, documentation handover, and lessons learned.
D. Feasibility, development, execution, and closeout: In the context of physical security systems, "Design" is a more precise and standard term than "Development" for the phase where detailed engineering plans and specifications are created.

1. ASIS International. (2021). Protection of Assets (POA)

Physical Security. Section 4.5

Project Management. This section outlines the typical phases of a security project

which align with the Feasibility (or Programming)

Design

Execution (or Construction/Implementation)

and Closeout (or Commissioning) model.

2. Fennelly

L. J.

& Perry

M. A. (Eds.). (2018). The Professional Protection Officer: Practical Security Strategies and Emerging Trends. Butterworth-Heinemann. Chapter 11

"The Security Project Management Process

" describes the lifecycle of a security project

emphasizing the distinct phases of conceptualization/feasibility

design development

implementation/execution

and project closeout.

3. Cleland

D. I.

& Ireland

L. R. (2006). Project Management: Strategic Design and Implementation (5th ed.). McGraw-Hill. Chapter 2

"Project Management System

" discusses the project life cycle

which universally includes initiation (feasibility)

planning (design)

execution

and closure (closeout) phases

providing a foundational project management framework applicable to the PSP domain.

The phrase "a temporary endeavor to accomplish a unique process" is a direct and standard definition of a project. The key characteristics are that it is temporary, meaning it has a defined beginning and end, and it is unique, in that it is not a routine, repetitive operation but creates a specific product, service, or result. This definition is fundamental to project management principles, which are a core competency domain for the Physical Security Professional (PSP) certification. The management of security system design, procurement, and installation is treated as a series of projects.

A. Scope of work: This defines the specific work, deliverables, and boundaries of a project; it is a component of a project, not the project itself.
B. Work breakdown structure: This is a project management tool that hierarchically decomposes the total scope of work into smaller, more manageable components.
D. System: A system refers to a set of interacting components forming an integrated whole, which is typically ongoing and operational, not temporary.

1. Project Management Institute. (2021). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) (7th ed.). Section 2.1, What is a Project?, p. 13. The guide states, "A project is a temporary endeavor undertaken to create a unique product, service, or result."

2. ASIS International. (2021). Protection of Assets (POA). Business of Security Volume. Chapter 4, "Project Management for Security Professionals." This chapter explicitly adopts the PMI definition, stating, "PMI defines a project as a temporary endeavor undertaken to create a unique product, service, or result."

3. Massachusetts Institute of Technology (MIT) OpenCourseWare. (2012). 1.040 Project Management, Fall 2012. Lecture Notes, Lecture 1: Introduction to Project Management. p. 10. The notes define a project as a "temporary endeavor undertaken to create a unique product or service." (Citing PMBOK Guide, 4th Ed.).

Fidelity bonds, surety bonds, and 3-D policies are all financial instruments used to transfer or mitigate risk, and are categorized within the realm of insurance and bonding. Fidelity bonds and 3-D (Dishonesty, Disappearance, and Destruction) policies are specific types of crime insurance that protect an organization from losses due to fraudulent or criminal acts. A surety bond is a three-party agreement that guarantees the performance of an obligation. In contrast, "Privacy Invasion" is a legal tort—a civil wrong or liability. It is a risk or peril that an organization might purchase insurance to cover (e.g., a Commercial General Liability or Cyber Liability policy), but it is not a type of insurance policy itself.

A. Fidelity Bonds: This is a form of insurance that protects an organization from financial losses resulting from fraudulent or dishonest acts committed by its employees.
B. Surety Bonds: This is a financial instrument, often issued by an insurance company, that guarantees a principal will fulfill a contractual obligation to an obligee.
C. 3-D policies: This is an acronym for "Dishonesty, Disappearance, and Destruction," which is a comprehensive package of crime insurance coverage.

1. Fennelly

L. J.

& Perry

M. A. (Eds.). (2021). Protection of Assets. ASIS International. In the "Business Principles" volume

the section on "Insurance" details various policies. It describes Fidelity and Surety bonds as risk transfer mechanisms (p. 168) and the 3-D policy as a key crime coverage (p. 170). Conversely

invasion of privacy is treated as a liability or legal risk

not a policy type.

2. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. Chapter 15

"Legal Aspects of Security

" discusses intentional torts

including invasion of privacy

as a source of civil liability for which a company may be sued (pp. 410-411). Chapter 4

"The Role of the Security Manager

" discusses insurance as a risk management tool

listing fidelity bonds as an example of coverage (p. 87). This clearly separates the risk (privacy invasion) from the risk mitigation tool (insurance/bond).