Free Practice Questions for ASIS ASIS-PSP Exam

Targeting refers to the process by which a threat actor selects a specific facility or asset based on attractiveness, vulnerabilities, symbolic value, or opportunity. This helps differentiate why one location may be more likely to be attacked than another.

Motivation (B) refers to the reason behind the attack.

Collusion (C) involves cooperation between insiders.

Desire (D) is a psychological element, not an operational step.

Self-assumption of risk means the organization accepts the financial responsibility for certain risks without transferring them to an insurer. This may involve setting aside internal reserves or using other contingency planning methods to absorb potential losses.

References from PSP: ASIS POA – Risk Financing Techniques; PSP Guide – Self-Insured Risk Models

A Business Impact Analysis is the correct process because it evaluates how disruptive events can affect critical operations, resources, and organizational continuity. While a risk assessment identifies threats, vulnerabilities, and likelihood, a Business Impact Analysis goes further by examining the operational consequences if a disruption actually occurs. In Human Resource and organizational management, this is important because security incidents can affect employee safety, staffing, communication, payroll, access control, and essential workplace functions. The analysis helps management prioritize critical services, allocate resources, and prepare recovery strategies to reduce downtime and organizational loss. The other options do not serve the same forward-looking planning purpose. Therefore, option D is correct because a Business Impact Analysis complements risk assessment by focusing on the real business and workforce impact of potentially disruptive events.

After activating a crisis management team due to a major disruptive event like a hurricane, the first step in the business continuity process is to assess the damage. This step determines the severity of the situation and informs decisions about continuity of operations, safety of personnel, and resource allocation.

Stakeholder communication (B) and media response (D) follow later.

Alternate work site activation (C) may be necessary but only after damage is assessed and site safety is determined.

System integration combines technology, procedures, and people—i.e., personnel—to create a cohesive and effective security solution. Personnel are essential for operating, monitoring, and responding to events within the system.

A (Safety) and D (Management) are broader organizational functions.

B (Equipment) is a part of the technology component, already implied.

In a competitive pre-bid conference, the most important information to record in the meeting minutes is the project questions raised and the answers provided during the conference. From an organizational and Human Resource management perspective, accurate documentation supports fairness, transparency, and equal access to information for all participants. If all bidders receive the same clarifications, the process remains ethical and professionally managed. Recording only attendance or walk-through details does not fully protect the integrity of the bidding process. The questions and answers are critical because they may affect how contractors interpret requirements, prepare pricing, and understand project expectations. Proper records also reduce misunderstandings, disputes, and claims of favoritism. Therefore, option D is the correct answer because it best supports a fair and well-documented procurement process.

Comprehensive Detailed Explanation:

A security system acceptance test verifies that the system has been installed according to the design and is operating properly. This includes ensuring cameras are correctly aimed, focused, and provide the intended coverage and image quality. This practical verification is critical for performance validation.

B and C may be part of training or specific functionality checks but are not core acceptance test items.

D refers to reliability testing, which is separate from initial acceptance.

Insurance should be viewed as a complementary component of a security program, not a replacement. It provides financial recovery after a loss has occurred but does not prevent the loss itself. Security operations—including physical barriers, surveillance, policies, and personnel—serve as the primary defense against threats. Insurance mitigates the financial impact only after an incident.

Security standards typically require that any opening in a perimeter (e.g., HVAC ducts, pipe chases, vents) be lockable or otherwise protected if the cross-sectional area is 96 square inches or greater. This threshold is based on a size that could permit unauthorized entry or object passage.

A, B, and D are incorrect measurements based on security industry benchmarks.

The statement is incorrect. The correct definitions are:

Libel is written defamation—false and damaging statements published in writing or other fixed mediums.

Slander is oral defamation—spoken false statements meant to damage someone’s reputation.

So, libel is not oral; slander is.