PSP study materials
PSP study resources

PSP key terms

PSP · Get comfortable with the vocabulary.

Risk assessment

The process of identifying assets and threats, analyzing the likelihood and consequences of loss, and evaluating which risks need treatment so that protective resources can be prioritized.

Related: Threat assessment, Vulnerability assessment, Residual risk
Threat assessment

A structured review of the adversaries who might attack an organization - their intent, capability, resources, and past behavior - used to estimate how likely and how severe an attack would be.

Related: Design-basis threat (DBT), Risk assessment
Vulnerability assessment

An examination of a facility's physical, procedural, and technical weaknesses that a threat could exploit, resulting in a prioritized list of deficiencies and recommended corrective actions.

Related: Security survey, Countermeasure, Risk assessment
Design-basis threat (DBT)

A documented description of the adversary - numbers, weapons, tools, tactics, and skill - that a security system must be able to detect, delay, and respond to; it sets the performance target for design.

Related: Threat assessment, Layers of protection
Asset criticality

The relative importance of a building, system, information, or person to the organization's mission, used to rank assets so that limited protection resources go where loss would hurt most.

Related: Business impact analysis, Risk assessment
Business impact analysis

A study that estimates the operational and financial impact of losing or disrupting specific assets over time, producing the maximum tolerable downtime and recovery priorities used to justify protection.

Related: Asset criticality, Consequence
Likelihood

An estimate of how probable or how frequent a specific threatening event is, based on adversary capability and intent and on how exposed the asset is.

Related: Consequence, Threat assessment
Consequence

The severity of harm - injury, death, property loss, business interruption, or reputational damage - that would follow if a threat successfully exploited a vulnerability.

Related: Likelihood, Residual risk
Residual risk

The risk that remains after countermeasures have been applied; it must be documented and formally accepted by the asset owner rather than assumed to be zero.

Related: Countermeasure, Risk assessment
Countermeasure

Any device, system, procedure, or design change applied to reduce a vulnerability, lower the likelihood of attack, or lessen the consequences of a successful attack.

Related: Layers of protection, Residual risk
CPTED

Crime Prevention Through Environmental Design: shaping the built environment through natural surveillance, access control, territorial reinforcement, and maintenance so that opportunistic offenders are discouraged.

Related: Security lighting, Security survey
Security survey

A structured on-site inspection of a facility that documents assets, existing controls, conditions, and weaknesses, providing the evidence base for a vulnerability or risk assessment.

Related: Vulnerability assessment, Asset criticality
Layers of protection

The deliberate arrangement of successive barriers, sensors, and response capabilities so an adversary must defeat several independent controls before reaching a protected asset.

Related: Perimeter barrier, Design-basis threat (DBT)
Perimeter barrier

A fence, wall, or other physical element that marks a site boundary and delays or channels intruders, giving detection and response forces time to act.

Related: Perimeter intrusion detection system (PIDS), Layers of protection
Perimeter intrusion detection system (PIDS)

Exterior sensors - fence-mounted, buried, infrared, or microwave - that detect someone approaching or crossing the site boundary and report the event to the alarm system.

Related: Perimeter barrier, Nuisance alarm, Alarm assessment
Intrusion detection system (IDS)

Sensors, a control panel, and annunciation that detect and report unauthorized entry into a protected interior area, alerting guards or monitoring staff to investigate.

Related: Alarm assessment, Nuisance alarm
Nuisance alarm

An alarm caused by weather, animals, vibration, or equipment rather than an intruder; high nuisance rates erode guard confidence and waste response resources.

Related: Alarm assessment, Perimeter intrusion detection system (PIDS)
Alarm assessment

The step of checking an alarm with video, guards, or other means to decide whether it is a real intrusion before committing a response.

Related: Video surveillance system, Intrusion detection system (IDS)
Access control system (ACS)

Hardware and software that identify people, decide whether they may pass through a given door, unlock it, and record the event for audit and investigation.

Related: Credential, Mantrap, Fail-safe and fail-secure
Credential

A card, fob, key, PIN, or biometric characteristic presented to an access control system as proof of identity when requesting entry.

Related: Access control system (ACS), Biometrics
Biometrics

Authentication based on measurable physical or behavioral traits such as fingerprint, iris pattern, face, or voice, which are difficult to share or counterfeit.

Related: Credential, Access control system (ACS)
Mantrap

A small enclosed space with two interlocked doors, only one of which can open at a time, used to control passage one person at a time and prevent tailgating.

Related: Access control system (ACS), Credential
Fail-safe and fail-secure

Fail-safe locks release when power is lost, protecting life safety and egress; fail-secure locks stay locked when power fails, protecting assets and requiring another means of escape.

Related: Access control system (ACS), Mantrap
Video surveillance system

Cameras, lenses, transmission, recording, and viewing equipment used to detect, assess, record, and investigate activity in and around a facility.

Related: Alarm assessment, Security lighting
Security lighting

Purpose-built illumination that supports detection and assessment by cameras and guards and discourages intruders; performance depends on maintained illuminance and uniformity, not just brightness.

Related: Video surveillance system, CPTED
Commissioning

The process of testing, adjusting, and documenting installed systems to verify they operate as designed and as the contract requires before the owner takes them over.

Related: Acceptance testing, Punch list, Sequence of operations
Acceptance testing

Formal tests showing that equipment or a system meets specified performance; factory acceptance testing happens at the vendor's plant, site acceptance testing after installation.

Related: Commissioning, Punch list
Punch list

A written list of defects, incomplete items, and corrections found during inspection that the contractor must fix before final acceptance and final payment.

Related: Commissioning, As-built drawings
As-built drawings

Drawings revised after installation to show actual device locations, cable routes, and equipment installed, used for maintenance, troubleshooting, and future modifications.

Related: Commissioning, System integration
Sequence of operations

A written narrative of how each system and component reacts to inputs such as alarms, valid credentials, and fire signals in normal and emergency conditions.

Related: Commissioning, System integration
System integration

Connecting separate security subsystems - access control, video, intrusion detection, fire - so they share data and can act together, often through a common management platform.

Related: Sequence of operations, Commissioning
Request for proposal (RFP)

A solicitation that states the buyer's requirements and asks vendors to propose solutions, schedule, and price; used when the buyer wants design input and will award on best value.

Related: Statement of work (SOW), Best value, Prequalification
Statement of work (SOW)

A contract document that defines the work to be performed, deliverables, schedule, acceptance criteria, and responsibilities of each party.

Related: Request for proposal (RFP), Change order
Prequalification

Screening of prospective bidders for licensing, financial strength, experience, and past performance before they are allowed to compete for the work.

Related: Request for proposal (RFP), Best value
Best value

An award method that weighs technical merit, past performance, and other qualitative factors along with price, rather than choosing the lowest bid automatically.

Related: Request for proposal (RFP), Life-cycle cost
Life-cycle cost

The total cost of a system over its useful life - acquisition, installation, operation, maintenance, upgrades, and disposal - used to compare alternatives on a fair basis.

Related: Best value, Service level agreement (SLA)
Performance bond

A surety guarantee that the contractor will complete the work according to the contract; if the contractor defaults, the surety pays for completion up to the bond amount.

Related: Change order, Statement of work (SOW)
Service level agreement (SLA)

A contract provision that sets measurable service commitments such as response time, uptime, and repair time, with remedies when the vendor misses them.

Related: Life-cycle cost, Performance bond
Change order

A written, approved amendment to a contract that changes scope, price, or schedule after the agreement is signed; uncontrolled change orders erode budgets.

Related: Statement of work (SOW), Performance bond