ASIS-PSP Exam Dumps - Physical Security Professional (PSP) Exam

An intangible asset is a non-physical resource that holds value for an organization, typically contributing to competitive advantage or operational capability. Examples include intellectual property, such as patents, trademarks, copyrights, and proprietary knowledge.

Land, buildings, and natural resources are tangible assets, meaning they have a physical form that can be seen and touched.

Intangible assets are critical in risk assessment because they often require specialized protection strategies, including legal safeguards, access control, and confidentiality measures.

ASIS PSP guidance highlights the need to recognize both tangible and intangible assets when conducting asset valuation and risk assessments, ensuring security measures are appropriately tailored to protect all forms of organizational value.

Business resumption refers to the long-term process (typically more than 60 days) of returning the organization to full, normal operations after a disruption. It follows the earlier stages of emergency response and business recovery and focuses on rebuilding systems and restoring service levels.

Business continuity (A) is a broader concept that includes all planning efforts.

Business recovery (B) focuses on short-term, interim operations.

Business healing (D) is not a formal term in continuity planning.

A Change Review Board (CRB) is typically composed of key stakeholders representing the major interests involved in a project—engineering, operations, security, IT, procurement, and other relevant departments. This cross-functional group ensures that proposed changes are reviewed, justified, and approved collaboratively.

A, C, and D list some roles, but they don’t fully represent the project’s key partners in a typical governance model.

A study by BDP International found that 35 percent of shippers were accounting for additional time to comply with the Advanced Manifest System (AMS), a U.S. Department of Homeland Security requirement that came into effect in February 2003. AMS mandates that import manifest information must be submitted at least 24 hours before the cargo is loaded onto U.S.-bound vessels at foreign ports.

The correct answer is B. The legal, statutory, and regulatory impacts of capturing this type of data or information.

In the ASIS PSP Body of Knowledge, video surveillance is specifically included under electronic security systems. The PSP Body of Knowledge also identifies legal and regulatory considerations for security applications, including video surveillance, privacy issues, personally identifiable information, and life safety.

Video surveillance captures images of people, activities, movements, and sometimes sensitive operational details. Before deploying cameras, the security professional must evaluate whether recording is legally permitted, what notices are required, where cameras may or may not be placed, how long recordings may be retained, who may access the footage, and whether privacy or labor rules apply.

Option A is important because recorded video must be protected from unauthorized access, but storage security comes after determining whether the organization is legally permitted to capture and retain the footage. Option D is also relevant, especially in workplaces, but employee privacy expectations are part of the broader legal and regulatory evaluation. Option C is a business benefit, not the primary security or compliance concern.

Therefore, the most important factor to evaluate when considering video surveillance is B.

When budgeting for replacement systems, planners must consider how quickly current technologies become outdated. Accelerating obsolescence—driven by rapid innovation and evolving threats—means that replacement cycles may need to occur sooner, and newer systems should be scalable and upgradeable.

A, B, and C are valid concerns but do not directly relate to future-proofing or replacement planning due to obsolescence.

The Transmission Control Protocol (TCP) works with IP as part of the TCP/IP suite. It divides data into packets, numbers them sequentially, and adds error detection and correction codes. This ensures that data is transmitted reliably, in order, and without loss or corruption.

File Transfer Protocol (B) uses TCP but does not handle packet creation itself.

Information Control Protocol (C) is not a recognized protocol.

“None of the above” (D) is incorrect because TCP is the correct answer.

The three primary types of cost estimates used during the implementation of a physical protection system are:

Budgetary: Initial estimate for planning and approval.

Preliminary design: Estimate based on conceptual design.

Final design: Detailed cost based on approved construction documents and specifications.

This staged estimation approach helps refine costs as the design evolves.

Other options mention contingency or maintenance, which are important but not considered one of the three standard estimating stages.