Question 1

The major advantage of zero-based budgeting is that:

Accepted Answer

A

Explanation: Zero-based budgeting (ZBB) is a method where all expenses must be justified for each new budget period, starting from a "zero base." This is fundamentally different from traditional incremental budgeting, which uses the previous period's budget as the baseline. The core process of ZBB requires managers to meticulously evaluate every function within their department, analyzing its needs and costs as if it were a new initiative. This rigorous justification process forces them to challenge existing practices, re-evaluate priorities, and actively seek more efficient or cost-effective alternatives to accomplish their objectives. This critical review and consideration of alternatives is a primary advantage of the ZBB approach.

Question 2

While conducting an executive protection risk assessment, the executive protection specialist should focus on what two areas in order to rate the risks?

Accepted Answer

C

Explanation: The process of rating risk in any security discipline, including executive protection, is fundamentally based on two factors: the likelihood of an adverse event and the potential impact (or consequence) of that event. "Threat likelihood" directly addresses the probability component. "Threat analysis" is the systematic evaluation of a threat's capabilities, intentions, and past activities to determine the potential severity and nature of an attack. This analysis directly informs the impact component of the risk equation. By combining the likelihood of a threat with a thorough analysis of its potential impact, a protection specialist can assign a rating (e.g., low, medium, high) to the risk.

Question 3

Which of the following surveys should be conducted to determine the effectiveness of risk controls and justify their placement within the security budget?

Accepted Answer

B

Explanation: A cost-benefit analysis (CBA) is a systematic process used to evaluate the financial feasibility of a project or expenditure. In the context of security, it directly compares the cost of implementing a risk control (countermeasure) against the financial benefit derived from the reduction in risk (e.g., averted losses). This analysis provides a quantitative justification for the control's effectiveness and its value, making it the essential tool for defending its inclusion and priority within the security budget. It answers the fundamental business question: "Is this security measure worth the investment?"

Question 4

Establishing an in-house guard service requires:

Accepted Answer

C

Explanation: Establishing an in-house (proprietary) guard service requires the creation of a comprehensive human resources and operational framework. This foundation consists of three critical, interdependent components: a structured recruitment program to attract suitable applicants, rigorous personnel screening procedures to verify qualifications and trustworthiness, and standardized training programs to ensure officers are competent and prepared. These elements are essential for building a professional, reliable, and effective security force from the ground up, forming the core of the service's operational capability and legal defensibility.

Question 5

After an information loss, which of the following three steps should be taken by an organization?

Accepted Answer

C

Explanation: Following an information loss, a structured incident response is critical. The first logical step is to conduct an investigation to determine the nature, scope, and cause of the loss. Concurrently, the organization must conduct a damage assessment to understand the impact on business operations, finances, reputation, and legal obligations. This assessment informs the prioritization of response efforts. Finally, based on the findings of the investigation and the damage assessment, the organization will implement the recovery plan to restore the lost information, remediate vulnerabilities, and return to normal business operations. This sequence represents a standard, logical progression in incident management.

Question 6

If an employer does not utilize testing for drug impairment it should:

Accepted Answer

B

Explanation: The foundation of any effective drug-free workplace program is a formal, written policy. Even without drug testing, a policy that explicitly prohibits the presence of detectable illegal drugs in an employee's system while on duty establishes clear expectations and a legal basis for disciplinary action. This policy serves as the primary tool for managing substance abuse issues through other means, such as supervisory observation and for-cause actions, and communicates the organization's commitment to a safe and productive environment.

Question 7

An important element of an emergency response plan includes:

Accepted Answer

B

Explanation: An Incident Management System (IMS), such as the Incident Command System (ICS), is a critical and foundational element of any modern emergency response plan. It provides a standardized, flexible, and scalable framework for command, control, and coordination among all responders. The primary purpose of an emergency response plan is to manage the immediate actions required to save lives, stabilize the incident, and protect property. An IMS establishes the necessary organizational structure, roles, responsibilities, and communication protocols to achieve these objectives effectively and efficiently, making it an indispensable component.

Question 8

In the event of an earthquake, all of the following are recommended EXCEPT

Accepted Answer

B

Explanation: During an earthquake, the primary safety protocol is "Drop, Cover, and Hold On." While extinguishing open flames like candles is a prudent fire prevention measure, a general recommendation to extinguish all light sources is incorrect and hazardous. Doing so would eliminate visibility, impeding safe movement and the ability to identify dangers such as debris or structural damage after the shaking stops. Emergency guidance specifically advises using flashlights, not open flames, for illumination, underscoring the need for safe light sources.

Question 9

Who shall establish, document, provide resources, and demonstrate commitment to a business continuity management policy within the defined scope of the business continuity management system?

Accepted Answer

A

Explanation: The responsibility for establishing policy, providing resources, and demonstrating commitment to a Business Continuity Management System (BCMS) lies with top management. This is a fundamental principle of governance for any management system. Top management has the ultimate authority and accountability to set the organization's strategic direction, allocate necessary resources (financial, human, and technical), and ensure the BCMS is integrated into the organization's processes. Their visible commitment is critical for fostering a resilient organizational culture and ensuring the effectiveness of the BCMS.

Question 10

Which of the following types of ethics is the most relevant to business?

Accepted Answer

A

Explanation: Applied ethics is the branch of ethics concerned with the analysis of specific, practical moral issues in private and public life. Business ethics is a principal subfield of applied ethics, focusing on the moral principles and problems that arise in a business environment. It involves applying ethical theories to real-world business dilemmas concerning corporate governance, social responsibility, insider trading, and discrimination. Therefore, it is the most directly relevant framework for guiding ethical decision-making and conduct within a business or security management context.

Question 11

The two key elements in any contingency plan are:

Accepted Answer

C

Explanation: The fundamental purpose of any contingency plan is to provide a clear and actionable guide for response during a non-routine event. To be effective, the plan must, at its core, explicitly detail the specific actions and steps that need to be taken (what is to be done) and clearly assign the roles and responsibilities for carrying out those actions to specific individuals or teams (who is to do it). Without these two essential elements, a document is merely a statement of intent rather than an operational plan, as it lacks direction and accountability.

Question 12

Security planning relating to threat assessment will result in the determination of the:

Accepted Answer

B

Explanation: Security planning that incorporates a threat assessment is a fundamental part of the overall risk management process. A threat assessment identifies potential threats and evaluates their likelihood and capabilities. This information, when combined with a vulnerability assessment and impact analysis, constitutes a risk assessment. The primary outcome of this process is the determination of which risks are unacceptable and therefore require mitigation. This directly translates to establishing the appropriate "degree of security required" to protect the organization's assets across all its areas. This determination then guides the selection of specific countermeasures.

Question 13

The relationship between law enforcement and private security is best when it is:

Accepted Answer

B

Explanation: The most effective and professionally endorsed relationship between public law enforcement and private security is one of cooperation. This model, often actualized through public-private partnerships (PPPs), recognizes that both sectors share the common goal of crime prevention and maintaining order. Cooperation allows for the leveraging of mutual resources, intelligence sharing, and coordinated efforts, which enhances overall community safety. While each entity retains its distinct legal authority and function, a cooperative framework ensures their efforts are complementary rather than duplicative or conflicting. This approach is a cornerstone of modern security management principles.

Question 14

The most effective way to maintain acceptable levels of vigilance is to:

Accepted Answer

A

Explanation: Vigilance decrement, the decline in attention during prolonged, monotonous tasks, is a primary challenge in security operations. The most effective countermeasure is to introduce stimulus variation. Systematically rotating an officer's duties between a static, low-stimulus fixed post and a more dynamic, higher-stimulus roving patrol directly combats this decrement. This rotation changes the physical and mental demands, breaking the monotony and helping to reset the officer's attention level. This practice is a core principle of human factors engineering applied to security force management to sustain alertness and operational effectiveness.

Question 15

The criterion that serves as the basis for rating fire-resistant document containers exposed to heat for varying periods of time is the:

Accepted Answer

C

Explanation: The internationally recognized standard for rating fire-resistant document containers, such as UL 72 (Tests for Fire Resistance of Record Protection Equipment), bases its classification on the maximum interior temperature allowed during a specified period of fire exposure. For containers designed to protect paper documents (Class 350), the primary criterion is that the internal temperature must not exceed 350°F (177°C). This threshold is set because paper begins to char and degrade significantly above this temperature. The rating (e.g., 1-hour, 2-hour) indicates the duration for which the container can maintain this safe internal temperature while exposed to a standardized fire.

Free ASIS CPP Actual Exam Questions