The Certified Protection Professional (CPP) is ASIS International's board certification for security management. It is aimed at experienced security managers and directors: people responsible for security programmes, budgets, risk decisions, investigations and crisis planning, rather than those just entering the field.
Who is eligible
CPP is not an entry-level credential. You must show a substantial amount of security experience, including a period in "responsible charge" of a security function. The exact number of years depends on your education. Check the current requirements on the ASIS International website before applying. If you are earlier in your career, ASIS's Associate Protection Professional (APP) is designed as a stepping stone.
Exam format
According to ASIS, the CPP exam has approximately 225 multiple-choice questions. 200 are scored, and up to 25 are unscored pre-test questions used to trial future items. You can't tell which questions are unscored, so treat every one as if it counts.
What the exam covers
The CPP Body of Knowledge is organised into seven domains:
- Security Principles and Practices
- Business Principles and Practices
- Investigations
- Personnel Security
- Physical Security
- Information Security
- Crisis Management
The domains are not equally weighted. The share of questions each one gets is based on ASIS's job analysis of what security managers actually do. The official Body of Knowledge document lists the tasks and knowledge areas under each domain, and it is the best checklist to study against.
How to prepare
Answer as a manager. The CPP tests judgement at management level. When two answers both look correct, the better one is usually the one a security manager should choose: the one that addresses risk, cost, policy and the organisation's objectives, not just the immediate technical problem.
Don't neglect the business domain. Candidates with operational backgrounds often find business principles, such as budgeting, financial justification and management practice, harder than physical security or investigations. Give it deliberate time.
Study against the Body of Knowledge. Work through the official BoK task by task and note where you are weak. This keeps your preparation tied to what is actually tested.
Build stamina with full-length practice. A 225-question exam is long. Full-length timed practice builds the concentration you need and shows which domains drag your score down.
Study resources from CertCraft
- CPP Practice Tests — exam-style questions across the domains.
- CPP Study Notes — condensed notes organised by topic.
- CPP Exam Simulator — interactive practice in your browser.
Looking at other ASIS certifications? See our guides to the APP and the Professional Certified Investigator (PCI), or browse our Security Management collection.
Always confirm current eligibility requirements, exam specifications and fees with ASIS International before applying. CertCraft Institute is an independent study resource and is not affiliated with, endorsed by, or sponsored by ASIS International.