PSAP study plan

Define the four access control models (DAC, MAC, RBAC, ABAC) and write one original example of each applied to a facility scenario

Perform a qualitative risk assessment on a hypothetical building using the asset-threat-vulnerability-consequence sequence, scoring at least five assets

Map the access control lifecycle (enrollment, issuance, use, review, revocation, audit) and identify the failure point most often missed in practice

Explain least privilege and separation of duties and describe how each is enforced through access levels and zones

Differentiate identification, authentication, and authorization and place each step on a PACS transaction diagram

Compare centralized, distributed, and hosted/cloud PACS architectures by failure modes, latency, and offline behavior

Trace a card read from reader to controller to host and label every decision point in the path

Draft a zone and access-level matrix for a three-building campus with at least four security tiers

Identify the roles of reader interface, intelligent controller, and host in a distributed system and state what each retains during a network outage

Compare fail-safe and fail-secure lock configurations and select the correct mode for egress doors, server rooms, and hazardous storage

Explain electrified lock hardware types (maglock, electric strike, electrified mortise, electric latch retraction) and their code and life-safety implications

Describe request-to-exit devices and the difference between a REX motion sensor and a push-button for bypassing a lock

Compare credential technologies (125 kHz proximity, 13.56 MHz smart card, MIFARE DESFire, mobile/BLE, biometrics) on security, cloning risk, and migration path

Explain mutual authentication and secure messaging and why legacy proximity cards are considered vulnerable

Match reader technology to environment: read range, interference, weather rating, and mounting considerations

Describe identity proofing and enrollment controls that prevent credential fraud at the point of issuance

Evaluate multi-factor combinations and identify which pairings are truly independent factors

Produce a door-by-door design checklist covering power, cabling, controller placement, and pathway separation

Calculate power supply and battery backup sizing for a given lock and controller load and document the assumptions

Plan an installation sequence from rough-in through commissioning and final acceptance testing

Define integration points with video, intrusion, and fire alarm systems and state the required interlock behavior for each

Write functional acceptance test steps for a controlled egress door

Identify the attack surface of a PACS: host servers, controllers, readers, credentials, and network links

Apply network segmentation, TLS, firmware management, and default-credential elimination to a PACS deployment

Explain why physical security devices are often the weakest link in an enterprise network and describe compensating controls

Draft an incident response runbook for a suspected credential cloning event, including containment and re-issuance steps

Define alarm handling priorities and describe how to tune nuisance alarms without weakening detection

Explain the roles of the SOC, guard force, and system administrator during a security event and where handoffs occur

Summarize the code and standards landscape relevant to egress, accessibility, and life safety and how each constrains PACS design

Describe privacy obligations for biometric data, video retention, and access logs and how to apply data minimization

Revisit the week 1 risk register and revise it with knowledge gained across all domains

Complete two timed practice sets weighted to the domain percentages and log every missed concept

Build a one-page quick-reference sheet of formulas, failure modes, and code constraints

Identify the three weakest domains from practice results and write a targeted remediation plan for each