These free ASIS study guides organise protection, investigation and physical-security learning around requirements and documented evidence. Use fictional facilities and incident records to practise risk reasoning, access boundaries, reporting and review. The CPP, PCI and PSP resources support distinct preparation directions, so choose the one matching your intended role. The activities are written tabletop exercises for authorised professional learning; they do not require collecting real personal information, conducting surveillance or changing a live security system.
Want free reference PDFs? Email freelearning@ciscoforall.com with your exam code and name. We will send an available older reference file free of charge. Availability varies. See the request section below.
Choose a ASIS learning path
Choose the learning direction closest to your role and current knowledge. These orientations help you organise practice; they are not official exam objective lists. Compare your chosen target with the exact current syllabus and record any additional topics you need.
| Learning path | Who it suits | Topics to understand | First practice task |
|---|---|---|---|
| Protection management | Management learners | Risk, responsibilities and response | Create a protection objective |
| Investigation reporting | Case-management learners | Evidence, scope and reporting | Build a fictional evidence log |
| Physical security | Facility-security learners | Zones, access and layered controls | Map a fictional facility |
Explore ASIS Premium study PDFs
Connect additional review material with a specific preparation gap. Open a relevant product to explore its details, confirm its code and version, and decide how it supports your learning goal.
| Premium resource | Preparation focus |
|---|---|
| ASIS-CPP — ASIS – Certified Protection Professional — Premium PDF | Protection management, risk and operational responsibilities. |
| PCI — Professional Certified Investigator — Premium PDF | Investigation evidence, case scope and reporting. |
| PSP — Physical Security Professional — Premium PDF | Physical-security requirements, zones and control review. |
CPP, PCI and PSP are distinct catalogue resources. Check the version and scope of each listing. Fictional scenarios here develop evidence-based reasoning without providing legal advice or instructions for real investigations.
Connect protection objectives with risk
A protection objective identifies what matters, the plausible loss and the operational requirement. Separate a threat scenario from a confirmed incident. Assess the assumptions and existing controls before selecting an additional measure. A long list of technologies does not explain how the protection objective will be met.
Practice task: Define three protection objectives for a fictional office and identify their assumptions. Expected result: Objectives tied to assets, consequences and existing controls. Common mistake to avoid: Selecting equipment before defining the protection need
Map zones and authorised access
A physical-access model distinguishes public, shared and restricted areas. Define the business reason for each access boundary and how an exception would be handled. A person entering the building does not automatically need access to every room. Include visitors and temporary access in the written model.
Practice task: Draw a fictional facility with three zones and a visitor handover route. Expected result: An access map with clear boundaries and owners. Common mistake to avoid: Treating building entry as permission to every area
Preserve evidence provenance in a fictional case
A useful evidence record states its source, collection context and limitations. Separate a direct observation from an interpretation or an unverified statement. Use fabricated records for practice and keep access to them limited within the exercise. Reporting should make uncertainty visible instead of disguising it through confident language.
Practice task: Log four fictional incident records with sources and one limitation for each. Expected result: A traceable evidence log separating facts and interpretations. Common mistake to avoid: Removing context that changes the meaning of a record
Write findings that match the evidence
A case report should explain the question, scope, observations and supported conclusion. Contradictory evidence deserves explicit treatment. Avoid making a broader allegation than the records establish. A reader should be able to trace each finding back to an identified item and see what further work remains.
Practice task: Write a short report from a fictional access anomaly with one contradictory observation. Expected result: A bounded conclusion and a clear unresolved question. Common mistake to avoid: Ignoring contradictory evidence to simplify the story
Plan response roles and communication
A response plan needs a trigger, decision authority and communication route. Distinguish information sharing from a decision to change operations. In a tabletop, include an unavailable owner and a false alarm so the plan is tested beyond its expected path. Record the time and rationale for each simulated decision.
Practice task: Create a tabletop response sequence for a fictional after-hours alarm. Expected result: A decision record with roles and escalation alternatives. Common mistake to avoid: Assuming the primary contact is always available
Review control effectiveness and maintenance
A control can be present while failing to meet the intended requirement. Define how its effectiveness would be checked and who reviews exceptions. Maintenance and training affect reliability, so include them in the review record. A single successful test establishes a narrower result than ongoing operational assurance.
Practice task: Build a review checklist for an access-control process with maintenance and exception evidence. Expected result: A repeatable review plan tied to protection objectives. Common mistake to avoid: Equating installation with demonstrated effectiveness
Practical checklist: produce evidence you can review
Complete these activities as written exercises or in an authorised practice environment with fictional data. Define the expected outcome before starting and save a brief explanation of what the result establishes. Verify version-specific steps for your selected technology.
| Activity | What to do | Expected result |
|---|---|---|
| Connect protection objectives with risk | Define three protection objectives for a fictional office and identify their assumptions. | Objectives tied to assets, consequences and existing controls. |
| Map zones and authorised access | Draw a fictional facility with three zones and a visitor handover route. | An access map with clear boundaries and owners. |
| Preserve evidence provenance in a fictional case | Log four fictional incident records with sources and one limitation for each. | A traceable evidence log separating facts and interpretations. |
| Write findings that match the evidence | Write a short report from a fictional access anomaly with one contradictory observation. | A bounded conclusion and a clear unresolved question. |
Common mistakes and better study habits
Use these comparisons to find an assumption worth revisiting. For each mistake, write a new example with different details and explain why the corrected principle still applies.
| Common mistake | Why it matters | Better approach |
|---|---|---|
| Ignoring contradictory evidence to simplify the story | Compare the assumption with the observation before changing the design. | A bounded conclusion and a clear unresolved question. |
| Assuming the primary contact is always available | Compare the assumption with the observation before changing the design. | A decision record with roles and escalation alternatives. |
| Equating installation with demonstrated effectiveness | Compare the assumption with the observation before changing the design. | A repeatable review plan tied to protection objectives. |
An original ASIS self-check scenario
An incident log shows one unusual entry time. Does that establish unauthorised conduct?
Explanation: It establishes an observation requiring context. Compare authorisation, clock accuracy, approved exceptions and corroborating records. Preserve the distinction between an anomaly and a supported finding; do not infer misconduct from one unexplained timestamp.
Write your own answer before reading the explanation. Identify the evidence supporting it, then change one detail and decide whether your answer should change. This is an original learning exercise, not an actual exam question.
A flexible four-week study plan
| Stage | Focus | Practice outcome |
|---|---|---|
| Week 1 | Select the target and foundations | Define three protection objectives for a fictional office and identify their assumptions. Objectives tied to assets, consequences and existing controls. |
| Week 2 | Apply core concepts | Draw a fictional facility with three zones and a visitor handover route. An access map with clear boundaries and owners. |
| Week 3 | Investigate weak topics | Log four fictional incident records with sources and one limitation for each. A traceable evidence log separating facts and interpretations. |
| Week 4 | Review mixed examples | Write a short report from a fictional access anomaly with one contradictory observation. A bounded conclusion and a clear unresolved question. |
Four weeks is an example schedule, not a promise of readiness. Adjust each stage to your experience and available time. Extend a stage when you cannot explain the topic without the notes or apply it to a fresh scenario. Revisit the exact target objectives so a familiar topic does not replace a relevant topic you have not practised.
Build a revision record that shows progress
Create a tracker with target topic, initial explanation, practice activity, observed result and next review date. Separate a topic you recognise from a topic you can apply. A useful record makes the remaining gap visible and helps you choose the next activity instead of repeatedly rereading the same material.
When an answer is wrong, preserve the initial assumption, the contradicting evidence and the corrected principle. Create a second example using different details. If the explanation works only for the first example, return to the concept before adding more resources. Review recurring errors together: they may reveal a missing foundation rather than several unrelated weaknesses.
| Tracker field | Example entry to write | Review question |
|---|---|---|
| Requirement | Define three protection objectives for a fictional office and identify their assumptions. | What outcome am I trying to establish? |
| Evidence | Objectives tied to assets, consequences and existing controls. | Which observation supports my explanation? |
| Limitation | State what the exercise did not establish. | Am I making a broader claim than the evidence allows? |
| Next activity | Draw a fictional facility with three zones and a visitor handover route. | What new example will test the principle? |
Request free ASIS reference PDFs
Email freelearning@ciscoforall.com with your exam code and name, the product or framework version if known, and the topics you need. We will send an available older reference file free of charge. Availability varies; a file may not be available for every target. The original notes, tables and exercises on this page are free to read without requesting a file.
Keep the code and version visible when using an older reference. Terminology, objectives and product behaviour may differ from your current target. Compare the material with the scope you intend to study and verify release-specific information before using it in a lab. We share only resources we are permitted to distribute. If you are unsure of the target name, include the learning goal so the request can be understood.
Combine practical learning with Premium PDFs
Use this guide to organise foundations and identify weaker topics. Then choose a relevant ASIS Premium PDF for additional review. Give the resource a clear purpose: explain a concept, compare alternatives or repeat a practical scenario. Track the exact target and version alongside your notes so useful older material is not mistaken for complete current coverage.
Build a preparation routine around topic review, original exercises and an error log. After reviewing a resource, close it and explain the principle in your own words. Apply that principle to an unfamiliar example and record any remaining uncertainty. The value comes from understanding and application, rather than the number of files collected.
Protection management, risk and operational responsibilities. — Premium PDF · Investigation evidence, case scope and reporting. — Premium PDF · Physical-security requirements, zones and control review. — Premium PDF
Frequently asked questions
Is this guide free?
Yes. The learning notes, tables, study plan and original exercises here are free to read. Premium PDFs are available separately through the linked product pages.
How do CPP, PCI and PSP preparation directions differ?
They connect respectively with protection management, professional investigation and physical security. Confirm the exact certification scope and choose exercises supporting the direction you intend to study.
Can I request a free reference PDF?
Yes. Email freelearning@ciscoforall.com with your name, exact target and exam code. We will send an available older reference file free of charge. Availability varies.
Will an older reference match my current target?
It may explain useful foundations while describing an earlier version. Compare its code, objectives and product behaviour with your exact target before treating it as a complete preparation resource.
How should I choose a Premium PDF?
Use the product table to find a resource matching your target. Explore its details and version, then connect it with the concept or practice gap you want to strengthen.
Must I complete the plan in four weeks?
No. Adjust the schedule to your experience, available time and practice results. Repeat a stage until you can explain its concepts and apply them to a different example.
Are these actual exam questions?
No. The scenarios are original exercises for understanding and decision-making. They are designed to help you practise explanations and evidence-based reasoning.
Does this guide guarantee an exam result?
No. Results depend on your knowledge, practical skills and preparation.
Choose your next ASIS study resource
Complete one small activity today and record its result. For an available older reference, email freelearning@ciscoforall.com. For additional preparation, choose a relevant Premium PDF above or browse the vendor selection below.