PSAC
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Physical Security Assessment Certificate (PSAC) is a professional credential for practitioners who plan, implement, and evaluate physical protection systems. It suits security managers, consultants, facility and risk officers, and law enforcement or military personnel transitioning to private-sector security. The exam tests six domains: physical security assessment and planning (20%), access control and intrusion detection (20%), surveillance and monitoring systems (15%), security risk management and threat analysis (15%), emergency response and incident management (15%), and security policies, procedures, and standards (15%). Questions are scenario-based and require applying concepts such as threat and vulnerability assessment, defense-in-depth, CPTED, access control layering, alarm assessment, and incident command. To prepare, study each domain systematically, focusing on how components integrate into a complete security system. Use official references and recognized security standards, practice with scenario questions, and be able to justify design and response decisions. The official body publishes current exam logistics, including scheduling and fees, on its website; candidates should consult it directly for the most accurate information. This page is independent study material and is not affiliated with or endorsed by the certifying organization.
What you'll study
About PSAC preparation
What is the PSAC exam format?
The PSAC exam is computer-based and consists of multiple-choice questions covering the six domains. The official body publishes the current number of questions, time limit, and delivery options on its website. Expect scenario-based items that test application rather than recall.
How difficult is the PSAC exam?
Difficulty is moderate to high. Candidates with field experience often find assessment and response domains easier, but struggle with risk analysis and standards. Those without hands-on exposure must study how components integrate. The exam rewards systematic preparation, not memorization alone.
How long is the exam and how many questions are there?
The official body publishes the current question count and time limit. Do not rely on second-hand figures. Check the certification website for the authoritative exam blueprint, as these details can change between exam versions.
What happens if I fail? Can I retake the exam?
Retake policies, waiting periods, and fees are set by the certifying organization. The official website publishes the current retake policy. Review your score report to identify weak domains, then adjust your study plan before scheduling a retake.
In what order should I study the domains?
Start with Security Risk Management and Threat Analysis, since it underpins assessment and planning. Then study Physical Security Assessment and Planning. Next, cover Access Control and Intrusion Detection and Surveillance and Monitoring Systems. Finish with Emergency Response and Incident Management and Policies, Procedures, and Standards.
What are common failure modes on the PSAC exam?
Candidates often fail by treating domains in isolation, ignoring how access control, surveillance, and response interact. Others memorize definitions without practicing scenario application. Weak risk analysis and unfamiliarity with standards also cause lost points. Practice integrated scenarios and justify each decision.
Do I need work experience to take the PSAC exam?
Eligibility requirements are set by the certifying organization. The official website states whether experience, training, or prerequisites are required. Check there before applying, as requirements may vary by region or membership status.
How should I prepare for scenario-based questions?
Practice with realistic cases: given a site description, identify threats, select countermeasures, and explain trade-offs. Focus on why a control is appropriate, not just what it is. Review after each case to reinforce the underlying principle.
Where can I find the official exam blueprint and policies?
The certifying organization's website is the only authoritative source for the exam blueprint, scheduling, fees, and policies. This study page is independent and not affiliated with the organization. Always verify details directly with the official body before making decisions.