ASIS APP Physical Asset Protection Exam 2025

Access Control - Correct Ans-control of persons, vehicles and materials through the implementation of security measures for a protected area Alarm System - Correct Ans-Combination of sensors, controls and annunciators arranged to detect and report an intrusion or other emergency. Asset - Correct Ans-anything that has tangible or intangible value to an enterprise Assets (Intangible) - Correct Ans-Assets that do not have a physical presence, including information, intellectual property, credibility and reputation, and brand identity. Asset Owner - Correct Ans-Member of an enterprise who is most accountable and responsible for the productivity, performance, and overall operation of an asset. Assets (Tangible) - Correct Ans-Assets that have a physical presence, including human and environmental assets. Auditor - Correct Ans-person with the personal attributes and competence to conduct an audit Barrier - Correct Ans-natural or man-made obstacle to the movement/direction of persons, animals, vehicles or materials Camera - Correct Ans-device for capturing visual images, whether still or moving; in security, part of a video surveillance system Consequence - Correct Ans-result or effect of an action, condition, or decision on achieving objectives and outcomes Continuous Improvement - Correct Ans-recurring process of enhancing a process or program in order to achieve improvements in overall performance consistent with the organization's policy Continuity - Correct Ans-strategic and tactical capability, pre-approved by management, of an organization to plan for and respond to conditions, situations, and events in order to continue operations at an acceptable defined level Contract Security - Correct Ans-A business that provides security services, typically the services of security officers, to another entity for compensation. Crime Prevention Through Environmental Design (CPTED) - Correct Ans-approach to reducing crime or security incidents through the strategic design of the built environment typically employing organization, mechanical and natural methods to control access, enhance natural surveillance, territoriality, and support legitimate activity Crisis - Correct Ans-an unstable condition involving an impending abrupt or significant change that requires urgent attention and action to protect life, assets, property, or the environment Criticality Analysis - Correct Ans-a process designed to systematically identify and evaluate an organization's assets based on the importance of its mission or function. Detection - Correct Ans-act of identifying an impending or actual security breach Disruption - Correct Ans-intentional, unintentional, or natural event that interrupts normal business, functions, operations, or processes, whether anticipated or not Due Diligence - Correct Ans-care that a prudent person might be expected to exercise in the examination and evaluation of risks Duty of Care - Correct Ans-responsibility of a person or organization to take all reasonable measures necessary to prevent activities that could result in harm to other individuals and/or their property Enterprise Security Risk Management (ESRM) - Correct Ans-strategic approach to security management that ties an organization's security practice to its mission and goals using globally established and accepted risk management principles Event - Correct Ans-change occurring in an interval of time with potential to alter outcomes Exercises - Correct Ans-evaluating management programs, rehearsing the roles of team members and staff, and testing the recovery or continuity of an organization's systems to demonstrate management competence and capability External Context - Correct Ans-external environment in which the organization seeks to achieve its objectives Facility (Infrastructure) - Correct Ans-Plant, machinery, equipment, property, buildings, vehicles, information systems, transportation facilities, and other items of infrastructure or plant related systems that have a distinct and quantifiable function or service. Hazard - Correct Ans-possible source of danger or conditions (physical or operational) that have a capacity to produce a particular type of adverse effect Impact - Correct Ans-evaluated consequence of a particular event Incident - Correct Ans-event with consequences that have the capacity to cause gains or losses/harm to objectives and/or assets of the enterprise Internal Audit - Correct Ans-systematic, independent, and documented process for obtaining audit evidence and evaluating it objective to determine the extent to which the management system audit criteria set by the organization are fulfilled Internal Context - Correct Ans-internal environment in which the organization seeks to achieve its objectives Intrusion Detection System (IDS) - Correct Ans-a system that uses a sensor(s) to detect an impending or actual security breach and to initiate an alarm notification of the event Lighting - Correct Ans-degree of illumination; also equipment, used indoors and outdoors, for increasing illumination Likelihood - Correct Ans-chance or probability that something will happen Lock - Correct Ans-device or fastener used for securing something Key Performance Indicator (KPI) - Correct Ans-metric used to evaluate factors that are crucial to the success of an organization or a particular activity in which it engages Maintenance Program - Correct Ans-processes and plans established for performing tests, calibration and repairs necessary to keep a system or a piece of equipment operational Mitigation - Correct Ans-limitation of any negative consequence of a particular incident Objective - Correct Ans-overall goal, consistent with the policy that an organization sets itself to achieve Organization - Correct Ans-group of people and facilities with an arrangement of responsibilities, authorities, and relationships Physical Protection System (PPS) - Correct Ans-the integration of people, procedures, equipment and technology for the protection of assets Physical Security - Correct Ans-that part of security concerned with physical measures designed to safeguard people; to prevent unauthorized access to equipment, facilities, material, and documents; and to safeguard them against a security incident Physical Security Assessment - Correct Ans-a thorough physical examination of a facility and its systems and procedures conducted to assess the current level of security, locate deficiencies and gauge the degree of protection needed Policy - Correct Ans-overall intentions and directions of an organization as formally expressed by top management Preparedness (Readiness) - Correct Ans-activities, programs and systems developed and implemented prior to an incident that may be used to support and enhance mitigation of, response to, and recovery from disruptions, disasters or emergencies Prevention - Correct Ans-measures that enable an organization to avoid, preclude or limit the likelihood and consequences of an event Preventative Action - Correct Ans-proactive change or improvement implemented to address a weakness that is not yet responsible for causing nonconformity Procedure - Correct Ans-specified way to carry out an activity or process Proprietary Security - Correct Ans-department within a company that provides security services for that company Protection in Depth - Correct Ans-strategy of forming layers of protection for an asset Residual Risk - Correct Ans-risk remaining after risk treatment Resilience - Correct Ans-the adaptive capacity of an organization in a complex and changing environment Resources - Correct Ans-any asset (human, physical, informational or intangible), facilities, equipment, materials, products or waste, that has potential value and can be used Response and Recovery Plan - Correct Ans-documented collection of procedures and information that can be developed, compiled, and maintained in readiness for use in an incident Risk - Correct Ans-effect of uncertainty on the achievement of strategic, tactical and operational objectives Risk Analysis - Correct Ans-process to characterize and understand the nature of risks to the enterprise, to assess the likelihood of those risks, and to define the potential consequences of those risks Risk Assessment - Correct Ans-overall and systematic process for evaluating the effects of uncertainty on achieving an enterprise's objectives Risk Criteria - Correct Ans-Terms of reference against which the significance of a risk is evaluated Risk Evaluation - Correct Ans-process for equating the results of risk analysis with risk criteria to determine whether a particular risk level is within an acceptable tolerance relative to its potential opportunity Risk Identification - Correct Ans-Process for determining the potential risks that might help or prevent an organization from achieving its objectives, including time dependencies, frequencies, duration, and p