CPP (PayrollOrg Certifications) study guide
CPP · Work through your exam, one topic at a time.
The Certified Protection Professional (CPP®) is ASIS International's flagship security management credential, described by ASIS as the internationally recognized "gold standard" in security management. It is designed for senior-level security managers with five to seven years of related experience, including at least three years in responsible charge of a security function. The CPP study guide has 7 sections and about 2,439 words.
01Security Principles and Practices
Security protects people, information, and assets so the organization can take business risks deliberately rather than accidentally. Every decision a protection professional makes should trace back to a business objective - a control nobody needs is as wasteful as a gap nobody saw.
351 words, about 2 min02Business Principles and Practices
The CPP exam expects you to talk like a manager, not a guard. That means budgets, financial statements, project management, vendor contracts, metrics, and organizational behavior.
367 words, about 2 min03Investigations
Investigations fall into three families, and the standard of proof differs in each. Criminal investigations are run by law enforcement and require proof beyond a reasonable doubt.
364 words, about 2 min04Personnel Security
Personnel security is continuous, not a single pre-hire check. It runs from job analysis and screening through onboarding, awareness training, periodic revalidation, and separation.
322 words, about 2 min05Physical Security
Physical security is designed in rings: site perimeter, building envelope, interior zones, and the critical asset itself. Each ring should deter, detect, delay, and allow response .
340 words, about 2 min06Information Security
Information security rests on the CIA triad : confidentiality (only authorized people see it), integrity (it is accurate and unaltered), and availability (it is there when needed). Every control you recommend should map to one of the three.
333 words, about 2 min07Crisis Management
An incident is a disruption; an emergency threatens life or property; a crisis threatens the organization's viability or reputation. The same event can escalate through all three, and the exam will test whether you can tell which phase you are in - because the priorities change.
362 words, about 2 min