ASIS APP study guide
ASIS APP · Work through your exam, one topic at a time.
The Associate Protection Professional (APP) is an entry-level security management certification offered by ASIS International, a global community of 34,000+ security professionals. ASIS positions the APP alongside its CPP, PCI, and PSP credentials as one of its globally recognized certifications, and specifically recommends it to early-career professionals as a way to stand out to employers. It is aimed at people building a security career - those new to the field or moving into protection roles - who want a credential that signals foundational competence before pursuing advanced designations. In broad terms, an associate-level protection exam tests the fundamentals of security management: core security principles, how security functions inside a business, risk identification and treatment, and physical protection of people, property, and information. The ASIS APP study guide has 4 sections and about 1,270 words.
01Security Fundamentals
Security fundamentals questions test whether you can reason from principles rather than recall products. Anchor yourself in the CIA triad: confidentiality (information is disclosed only to authorized parties), integrity (data and systems are accurate and unaltered), and availability (authorized users can access resources when needed).
327 words, about 2 min02Business and Organizational Principles
Security exists to enable the mission, not to obstruct it. Candidates must understand governance structures: the board and executive management set risk appetite, a security steering committee aligns security with business units, and the CISO translates risk into business terms.
325 words, about 2 min03Risk Management
Risk management is a continuous cycle: identify assets and threats, assess vulnerabilities, analyze likelihood and impact, evaluate against risk appetite, treat, and monitor. Know the treatment options: mitigate (apply controls), transfer (insurance, contracts), avoid (stop the activity), and accept (documented decision).
316 words, about 2 min04Physical Security
Physical security protects people, property, and information. Think in concentric layers: site perimeter, building envelope, interior zones, and asset-level protection.
302 words, about 2 min