CPP (PayrollOrg Certifications)

Certified Protection Professional (CPP)

More study resources

About this exam

The Certified Protection Professional (CPP®) is ASIS International's flagship security management credential, described by ASIS as the internationally recognized "gold standard" in security management. It is designed for senior-level security managers with five to seven years of related experience, including at least three years in responsible charge of a security function. Additional eligibility requirements include full-time employment in a security-related role, no criminal conviction that would reflect negatively on the profession, ASIS, or the certification program, and agreement to abide by the ASIS Certification Code of Conduct and the policies in the Certification Handbook.

The exam consists of 200 scored and 25 unscored multiple-choice questions covering seven domains: security principles and practices, business principles and practices, investigations, personnel security, physical security, information security, and crisis management. Delivery is at a test center or by remotely proctored exam if approved.

For preparation, ASIS points candidates to Protection of Assets (POA), the seven ASIS Standards & Guidelines that make up the CPP reference set (CSO, ORM.1, SRA-2024, WVPI.1, PAP, IAP, PBS), a practice exam built from retired items, certification review courses, the CPP Study Manual, flash cards, and a practice test. ASIS cautions that its exams are experience-based, so candidates should apply their own experience rather than memorize reference materials. The Self-Assessment Guide and Certification Handbook are the starting points for eligibility and readiness.

What you'll study

Common questions

About CPP preparation

How many questions are on the CPP exam, and do all of them count?

The exam contains 200 scored and 25 unscored multiple-choice questions. The unscored items are not counted toward your result, so you will answer 225 questions in total. ASIS does not identify which items are unscored, so treat every question as if it counts.

What experience do I need before I can sit for the CPP?

ASIS states the CPP is designed for senior-level security managers with five to seven years of related experience, including at least three years in responsible charge of a security function. You must also be full-time employed in a security-related role, have no disqualifying criminal conviction, and agree to the Code of Conduct and program policies.

Where can I take the exam?

ASIS lists two testing options: at a test center, or by remotely proctored exam if you are approved for that option. The Certification Handbook contains the detailed policies and procedures for both, so confirm your option there before scheduling rather than assuming remote delivery is automatic.

How should I sequence my study across the seven domains?

ASIS publishes the seven domains and their tasks and knowledge statements in the CPP blueprint, so use that as your map. Build your plan around Protection of Assets and the seven Standards & Guidelines that make up the CPP reference set, then use the practice exam, study manual, and flash cards to test recall domain by domain.

Is the practice exam the same as the real exam?

No. ASIS states the CPP Practice Exam contains items that once appeared on the actual certification exams but are now retired. Its purpose is to show you how exam items are formatted on the current exam, not to predict your score or serve as a substitute for working through the reference set.

What is the most common way candidates get questions wrong?

ASIS explicitly warns that its exams are experience-based and that candidates should not attempt to memorize the reference sets. Item writers and reviewers use those references to determine correct answers, but the questions require you to apply your own professional experience to the scenario rather than recite a definition.

What are the passing score, exam time limit, fee, and retake policy?

Those details are not stated on the ASIS CPP program page reviewed here. ASIS directs candidates to the Certification Handbook for policies, procedures, eligibility requirements, testing options, and fees. Check the current Handbook through ASIS directly before you apply, since figures and policies change between revisions.

How do I know whether I am ready to apply?

ASIS publishes a Self-Assessment Guide intended to help you determine which exam is right for you and to assess your exam readiness. Many ASIS chapters also run study groups. Using the guide alongside the practice exam and review course is a reasonable way to judge readiness before committing to an application.