ASIS Updated ASIS-PSP Exam Questions and Answers by aiza

Business resumption refers to the long-term process (typically more than 60 days) of returning the organization to full, normal operations after a disruption. It follows the earlier stages of emergency response and business recovery and focuses on rebuilding systems and restoring service levels.

Business continuity (A) is a broader concept that includes all planning efforts.

Business recovery (B) focuses on short-term, interim operations.

Business healing (D) is not a formal term in continuity planning.

A hybrid staffing model uses both proprietary and contract security personnel. In this scenario:

Proprietary staff can be assigned to sensitive and top-secret projects for tighter control, loyalty, and internal vetting.

Contract staff can manage less critical areas such as visitor parking, reducing cost.

This model is both secure and cost-effective, offering flexibility and risk-based deployment.

B (Contract) is cost-effective but lacks control for sensitive tasks.

C (Proprietary) is highly secure but more expensive.

D (Total systems) is not a staffing strategy.

Effective risk mitigation requires proportional countermeasures. As threats become more advanced or sophisticated, security measures must also be upgraded accordingly. If not, the residual risk must be transferred, avoided, or accepted.

A and B are incorrect because they imply static or uniform responses to dynamic threats.

C is overly narrow; system performance depends on multiple factors, not just departmental capability.

The correct answer is A. employee identification card.

In PSP-related physical security, access control is one of the core physical security countermeasures. The ASIS Certification Handbook places electronic security systems, including access control, and visitor/vendor management policies within the PSP Body of Knowledge under physical security system application, design, and integration.

An employee identification card or badge is considered a basic and long-established access control tool because it helps security personnel verify that a person belongs to the organization. It may include the employee’s name, photograph, department, ID number, color coding, expiration date, or access authorization level. A security management reference also uses this exact concept, describing the employee identification card or badge as a basic and time-honored access control tool.

The other options are less accurate:

Personal recognition is a method of recognition, not a physical access control tool.

Visitor pass is mainly for temporary/non-employee access, not the basic employee access control tool.

Proximity card is an electronic access credential, but it is a more modern technology-based tool, not the classic “time-honored” one.

Therefore, the best answer is A. employee identification card.