Prepare for the PSP by following a security project from assessment through design to implementation. Use the three-domain outline to check the full scope: identifying risks, turning findings into requirements, selecting measures, and managing procurement, acceptance and ongoing support. The worked example shows how to connect a proposed measure to a documented finding.
What the PSP credential covers
The Physical Security Professional (PSP) credential, issued by ASIS International, certifies knowledge and experience in physical security assessment, the application, design, and integration of physical security systems, and the implementation of physical security measures.
ASIS positions the PSP for professionals whose primary responsibility is conducting threat surveys, designing integrated security systems that combine equipment, procedures, and people, or installing, operating, and maintaining those systems. The credential signals expertise in identifying vulnerabilities through physical security surveys, performing cost analysis for selecting integrated measures, and managing systems procurement, acceptance testing, and implementation.
The applicable syllabus is the PSP Body of Knowledge updated in 2022, following a job analysis study ASIS conducted that year. Questions reflecting the clarified statements began appearing on exams in late 2023, so any older study material written to a prior outline should be checked against the current document.
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections; PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements; Physical Security Professional (PSP), ASIS International certification page — Eligibility summary, exam description, and reference materials
Eligibility requirements
You qualify through physical security experience scaled to your education: five years without a degree, four with a bachelor's, or three with a master's. Holding the APP reduces the first two routes by one year.
Experience must be full-time engagement in security or loss prevention, or security as a primary duty. ASIS recognizes several forms: protective work in the public or private sector, roles at firms whose duties substantively relate to designing and applying protection systems, and full-time educators whose teaching covers protection of assets. Up to one year of directly relevant, full-time internship can count, and internships may be unpaid for the PSP.
All applicants must also have no felony conviction that would reflect negatively on the security profession, ASIS, or the certification program, sign the ASIS Certification Code of Professional Responsibility, and agree to the program's policies. Current employment is not required, so a career gap does not by itself disqualify you.
| Education | Required experience | If you already hold the APP |
|---|---|---|
| No higher education degree | Five years | Four years |
| Bachelor's degree or international equivalent | Four years | Three years |
| Master's degree or international equivalent | Three years | Three years |
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections; Physical Security Professional (PSP), ASIS International certification page — Eligibility summary, exam description, and reference materials
Exam format, scoring, and results
Expect about 140 multiple-choice questions in two and a half hours: 125 scored items plus 15 unscored pretest items, each with four answer choices and exactly one correct answer.
Both wrong answers and unanswered questions count as incorrect, so answer every item before time expires; a timer on screen shows your remaining time. Your raw score is the total number of correct responses.
ASIS scores its exams on a scaled scale, and a scaled score of at least 650 is required to pass. A scaled score is neither your number of correct answers nor a percentage; it is a statistically transformed raw score that keeps the passing standard consistent across exam versions.
After you submit, preliminary results arrive by email from Prometric, typically within up to five hours. ASIS sends official verification roughly three weeks later, and you can also retrieve your score report from the Prometric website using your confirmation number and last name.
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections
The three tested domains
Knowledge is tested across three domains, and each domain's weight reflects its relative importance in the exam blueprint set by the 2022 job analysis.
The domains form a sequence rather than isolated subjects. Assessment produces the risk findings that justify countermeasures; design turns those findings into documented requirements and systems; implementation procures, installs, tests, and sustains what was designed. When you study, keep tracing how each phase consumes the outputs of the one before it, as a practical way to connect the topics while studying.
The table gives the official weights. Read the full body of knowledge for the complete task and knowledge statements in each domain; it is the authoritative outline and the checklist against which you should honestly rate your own experience.
| Domain | Weight |
|---|---|
| Domain 1: Physical Security Assessment | 34% |
| Domain 2: Application, Design, and Integration of Physical Security Systems | 35% |
| Domain 3: Implementation of Physical Security Measures | 31% |
Sources checked: PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements
Domain 1: Physical security assessment (34%)
This domain covers planning an assessment, valuing assets, characterizing threats and hazards, quantifying vulnerabilities, and performing a risk analysis that leads to justified countermeasures.
The outlined tasks run from developing an assessment plan and identifying critical assets, through analyzing the nature, severity, and likelihood of threats and the operating environment, to conducting surveys that identify and quantify vulnerabilities using data such as incident reports, interviews, and crime statistics. You are also expected to interpret building plans and know where to find applicable standards, regulations, and codes.
The final task links analysis to action: risk analysis methods and management principles, loss event profiles, and countermeasures matched to specific risks. Cost thinking belongs here too, including return on investment and total cost of ownership, along with legal and regulatory considerations for measures such as video surveillance, privacy, personally identifiable information, and life safety.
For preparation, practice connecting a written risk finding with a relevant countermeasure. The next example supplies the finding and two proposals.
Sources checked: PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements
Worked example: tracing a countermeasure to a risk finding
Compare each proposal with the loss mechanism described in the assessment.
This example uses only the premises stated in the prompt and the body of knowledge's requirement that countermeasures relate to specific risks identified in the risk analysis. Work it before revealing the answer.
Worked example
An assessment you wrote records the following risk finding: small electronics are removed from a shared warehouse staging area by staff and delivery drivers during normal operating hours; no perimeter breaches or after-hours intrusions were recorded. Two proposals reach you: (A) replace the perimeter fence with a taller anti-scale fence, or (B) introduce controlled hand-off points and inventory checkpoints where goods move from staging to loading. Stated premises: the budget funds only one proposal this year, and every funded countermeasure must be justified by a documented risk finding. Which proposal does the finding support?
Show the answer
Proposal B.
The documented losses occur while goods move through the staging and loading process, which is the process addressed by Proposal B. Proposal A addresses perimeter intrusion, for which this fixture supplies no finding. This makes B the relevant proposal under the stated selection rule; it does not establish its real-world effectiveness, cost or implementation requirements.
Sources checked: PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements
Domain 2: Application, design, and integration (35%)
This domain covers establishing performance requirements from your risk analysis, selecting countermeasures, and producing design documentation and project plans.
The first task asks you to establish security program performance requirements while respecting design constraints such as regulations, budget, materials, and system compatibility. The outline names concepts you should be able to define and apply: crime prevention through environmental design (CPTED), defense-in-depth, and the 4 Ds, meaning deter, detect, delay, and deny. Functional, operational, and performance requirements, plus success metrics, round out this task.
The second task spans the countermeasure families the outline lists: structural measures such as barriers, lighting, locks, and ballistic protection; electronic systems such as access control, video surveillance, and intrusion detection; security staffing; screening of people, packages, and vehicles; emergency notification; data storage and network infrastructure principles; communications; monitoring and display; primary and backup power; signal transmission; and visitor and vendor management policies. Treat these as a scope map: the source outlines what exists, and the official references supply the technical depth.
The third task covers design phases from pre-design through construction documentation, design elements such as drawings, specifications, and calculations, construction specification standards, systems integration, project management concepts, scheduling with tools like Gantt and PERT charts, and cost estimation including value engineering. Practice reading a scenario for its constraints before considering any solution.
Sources checked: PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements
Domain 3: Implementation of physical security measures (31%)
This domain covers the bid process, procurement, managing installation through acceptance testing, staffing the security program, and monitoring systems across their life cycle.
Early tasks concern contracting: running pre-bid meetings and site visits, choosing bid package types such as RFP, RFQ, IFB, or sole source, defining bid components and evaluation criteria, applying technical compliance checks, and observing ethics in contracting. Procurement follows, with vendor evaluation, due diligence, and reference checks feeding a managed procurement process.
Implementation management includes installation and inspection techniques, systems integration, commissioning, resolving installation problems through punch lists, configuration management with as-built drawings, and final acceptance testing criteria distinguishing system acceptance testing from factory acceptance testing. End-user training requirements also fall here, as do requirements for the personnel who support the program, including roles and limitations of proprietary and contract security staff, human resource management, post orders, and security awareness training for non-security personnel.
The final task extends through the system life cycle: preventative and corrective maintenance, calibration, service agreements, warranty types, ongoing training for upgrades, and the process for evaluating and replacing systems. As a study task, explain what evidence would show that each of these implementation activities has been completed.
Sources checked: PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements
Applying, scheduling, and testing options
Apply online, allow two to three weeks for review, and watch for your authorization-to-test email. Since 1 September 2026, remote proctoring is available only through an approved accommodation.
Your application needs an unofficial transcript if you are claiming a degree, a resume or CV detailing security experience aligned with the exam domains, names and contact information for three references who can verify your work, and a supervisor who can verify your employment. Foreign-language submissions must include an English translation. Make sure the name on your application exactly matches your valid, government-issued photo ID; a mismatch means you will not be permitted to test.
Under the handbook updated 4 August 2026, remote proctoring is no longer broadly available. From 1 September 2026, you can test remotely only through an approved Professional Certification Board Certificant Relations Committee accommodation, requested through ASIS's established accommodation process with supporting documentation. Distance or geography alone is not sufficient justification.
The exams are administered in English and Spanish, and candidates selecting the Spanish form also receive an English translation. If English is not your primary language and you test in English, you may request 25% additional testing time: email your full name as shown in your ASIS record, your ASIS ID, email address, the specific certification, and an attestation of need. This request must be submitted and approved before you schedule your appointment, and you may choose either the additional-time option or the Spanish-language exam form, but not both for the same appointment.
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections
Official resources and how to check your preparation
Start with the body of knowledge and an honest self-assessment of your experience per domain, then study the official PSP reference set, whose materials ASIS item writers use to source correct answers.
ASIS's own candidate FAQ states that correct answers are sourced from the list of reference materials and relate to the exam's content domains, which makes the reference list the anchor for your study plan. The PSP set includes Protection of Assets: Physical Security, Implementing Physical Protection Systems: A Practical Guide (3rd Edition), the Physical Asset Protection Standard, and the Business Continuity Management Guideline. ASIS also notes the exams are experience-based, so apply your own experience rather than memorizing the reference sets.
The PSP Practice Exam contains retired items from real exams and is useful for seeing how questions are phrased. ASIS additionally offers a study guide, flash cards, review courses, a self-assessment guide for choosing among its four exams, and chapter study groups. None of these are required, ASIS does not mandate any study method, and ASIS does not guarantee success merely because you used its preparatory materials.
Read the task statements, identify gaps in your experience, and study the corresponding official references. Use the practice exam to become familiar with the item format and review what your mistakes reveal; keep all three domains in your plan.
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections; Physical Security Professional (PSP), ASIS International certification page — Eligibility summary, exam description, and reference materials; How should I study for the exam?, ASIS International candidate FAQ — Reference materials as the source of correct answers
Final checklist before you apply
Use the domain map to identify your next study task, then complete the application steps for your chosen route.
- Record the topic gaps revealed by your reading and practice, and revisit them in the official references.
- Collect your experience documents and references, and check the current fee for your membership and market category.
- Arrange any accommodation before scheduling the authorized exam appointment.
Sources checked: ASIS Board Certification Handbook, updated 4 August 2026 — PSP certification, eligibility, exam administration, scoring, and policy sections; PSP Body of Knowledge (updated 2022), ASIS International — Domains 1-3 with weights, tasks, and knowledge statements; Physical Security Professional (PSP), ASIS International certification page — Eligibility summary, exam description, and reference materials
Sources checked
Exam facts checked against official ASIS sources: