CPSS
Certified Professional in Supply Chain Security (CPSS)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Professional in Supply Chain Security (CPSS) is an independent professional credential for people who protect goods, data and reputations as products move from factory to final mile. Candidates typically work as supply chain security managers, loss-prevention leads, customs and trade compliance specialists, logistics risk analysts, warehouse and transport security officers, or consultants serving shippers, carriers, freight forwarders and third-party logistics providers. The exam tests breadth rather than a single specialty: governance and risk management, threat and vulnerability assessment, physical site protection, cargo and in-transit security, information and cyber risk across trading partners, insider and supplier risk, customs and trade-security programs, incident response and continuity, and audit and performance measurement. Expect scenario-based multiple-choice items that ask you to choose the best control or the most defensible next step, not to recall a single definition. Preparation works best in layers: build a governance and risk vocabulary first, map your own organization's controls against each domain, then drill weak areas with practice scenarios and short written rationales. Because this page is independent study material, confirm current administrative details with the certifying body before you register or schedule.
What you'll study
About CPSS preparation
Is this an official CPSS exam page?
No. This is independent study material written for candidates preparing for the CPSS exam. It is not affiliated with, endorsed by, or sponsored by the certifying organization, and it does not reproduce any official question bank. Always treat the certifying body's own handbook as the authoritative source for exam rules and content.
What is the exam format?
The published format is multiple choice. Beyond that, question count, timing and delivery method are set by the certifying body and can change between exam versions. Check the official candidate handbook or website for the current structure rather than relying on secondhand reports from earlier candidates.
How long is the exam and how many questions are there?
The certifying body publishes the current question count and time limit, and those figures are not repeated here because they are version-specific. Look for the candidate handbook or exam blueprint on the official site. When you practice, time yourself against the official limit so your pacing is realistic.
What does it cost and what is the passing score?
Fees, passing scores and any regional pricing are set and published by the certifying organization, not by study sites. Confirm the current figures directly on the official website before you budget or book. Passing standards are usually scaled rather than a simple raw percentage, so avoid target numbers quoted in forums.
How difficult is the exam?
Candidates with several years of hands-on supply chain, logistics or security experience generally find the concepts familiar but the application demanding. The difficulty comes from scenario items where two answers are both plausible and one is better because it addresses root cause, evidence or proportionality. Pure memorization of program names is rarely enough.
How should I order my study?
Start with Domain 1 to build a governance and risk vocabulary you will reuse everywhere. Then take threats and risk assessment, followed by physical, cargo and cyber controls, since those domains apply the risk method. Finish with personnel and third-party risk, regulatory programs, incident and continuity, and audit and measurement. Weight your time by the published domain percentages.
What are common failure modes?
Three recur: memorizing trade-program acronyms without understanding eligibility and validation logic; choosing the most aggressive control instead of the proportionate, risk-based one; and ignoring documentation, audit trail and continuous improvement in scenario answers. Another frequent error is treating cyber and physical security as separate when the question spans both.
Can I retake the exam, and how long is the certification valid?
Retake rules, waiting periods, recertification cycles and continuing-education requirements are set by the certifying body and change over time. The official website or candidate handbook lists the current policy. Confirm before you register, and note any recertification deadlines in your calendar as soon as you pass.
Does this page include practice questions?
No. This page is the introduction and FAQ only. Use it to understand scope, study order and exam feel, then build your own practice by writing scenario questions from your organization's incidents and controls. Explaining why a wrong answer is wrong is the highest-value drill.