Preparing for the CPP exam

Last month I announced that I passed the CPP exam. Since then, many have asked how I prepared for it and what I thought of the test. So I thought if 10 people asked, then it might be worth writing about to benefit everyone else who may be considering the CPP exam.

Disclaimers

1.      I am not going to discuss the actual content of the test. I think that would be unethical and unfair to the CPP’s who have put in the hard work. 

2.      I am not suggesting my methodology is the best way to study for the test. It may not even be a good way but it worked for me.

What is the CPP exam?

The CPP is an exam that covers the spectrum of physical security. It is trying to validate that you have enough knowledge about the industry to manage a security function. Note that I said knowledge, not experience. Unfortunately, it is near impossible to measure experience base on a test. This is why ASIS has exam requirements. 

As you can see in the chart above, ASIS recommends roughly 2,600 pages of study material for the exam. I signed up for the CPP prep workshop at ASIS 2016 in Orlando, to understand the scope of the test. At the workshop, they went through study habits, how the test is designed and strategies for taking it. They also went over many problem areas. The course concluded with a practice exam, which was a great way to benchmark my foundation of knowledge vs. the test.

Thank you Gail Essen & Philip Deming for putting on a great primer! If you are unsure about the test, this 2 day workshop is a great exercise.

The Master Plan

The best advice from the workshop was to schedule the exam to force commitment. I found two colleagues to form a study group so that we would stay on schedule and accountable. I scheduled and paid to test the last week in February. I set up a 12 week study schedule averaging 236 pages of reading per week. We convinced ourselves that studying through the holidays was perfect due to extra time off work. Not so much! Work had its influence on our schedule, as did our families. Before long, I received a calendar notification: “3 weeks until CPP slacker!” Sometimes you know yourself too well…

The New Plan

3 weeks left, I’ve read 50 pages, and the week prior to the test, I have family visiting from Chicago. Time for a new plan. Anytime you receive a project with a crazy deadline, you need to assess the actual work required to complete it. You also need to recognize that completion and perfection are two different things. It was an exercise in problem solving.

I set off to define the problem. I found the content breakdown in my workshop materials. I needed a 70% to pass the test, so I need to figure out what makes up 80% of the content.

·      Physical Security 25%

·      Security Principles & Practices 21%

·      Business Principles & Practices 13%

·      Personnel Security 12%

·      Crisis Management 10%

Next, I went to the ASIS website and looked through their education agenda for the year. My assumption was they would do most of their education and webinars on the topics that are most important. Risk & facility assessment, CPTED, and various flavors of management makes up most of their education schedule.

Coming from the medical field, I’m used to taking tests. In my experience, a few things help ensure your success.

1.      Terminology. Every organization creates their own terminology that isn’t necessarily used at work. To understand the questions, you need to understand their words.

2.      Core processes. Every certification is built upon that organization’s core processes. These are their stamp on the industry. Understand the workflow and the why.

3.      Test taking strategy. Do not get bogged down. This will breed indecision throughout the exam. Come back to the hard or weird questions later.

I began searching the tables of contents to identify where the critical topics reside. I found the Standards & Guidelines to be the most important reference to study. They are the biggest return on your time investment and here is why.

1.      Each Standard and Guideline is short! Most are less than 60 pages.

2.      They start with a glossary. This includes every term for that topic. 

3.      They focus on the core processes and the critical points for that topic.

The Physical Security POA contains the details of the content that makes up the first 70% of test. Anything in the top 70% that I wanted to learn more about was in this POA.

A first time go!

I broke the code! At least I hoped I had. With 2.5 weeks before the test, I could study 500 pages in the evenings while entertaining my guests.

1.      I read the glossaries each evening.

2.      I took notes and sketched the core processes in an attempt to understand the transitions, milestones, and trouble points. I also wrote my notes on the drawings so I could visualize the questions.

3.      I read with the intent to become familiar, not an expert in this particular content. After all, I am a security professional. I know how all these processes work. I just needed to sync the terms and processes with how I do business.

Day of the test, I didn’t crack a book or turn on my computer. I got up earlier than usual so that I could ensure a deliberate and relaxing morning routine. I took my visiting nephew out for lunch and dropped him off at the mall so I could take the exam. 

During the test I took four 5 – 10 minute breaks. Anytime I began to get bored or uncomfortable, I walked away. If you allow these conditions to persist, you will begin to rush your answers.

I passed! Was it easy? No. Would I recommend this 515 page study regimen to every CPP candidate? Not a chance. Did I have supreme confidence as I clicked the button to end the test? No, I was almost 50/50 on whether I passed. The key is to know yourself. Candidates should honestly evaluate their range of experience. How broad is it? I have been fortunate that my career has given me first hand exposure to most of the security industry. This helped me immensely. 

If I had to do it again

My formal advice to CPP candidates would be this.

1.      Take the refresher if possible.

2.      Read all the Standards & Guidelines thoroughly.

3.      Read the Physical Security POA to solidify your ASIS knowledge base.

4. If you feel you have other deficiencies, read those POAs by topic, as needed.

5. Don't overthink it. The answer is what the book says, not necessarily what your experience tells you.

I believe that 85% of candidates who honestly meet the experience criteria can pass the exam with this approach. 

This is a reflection of my experience and perspective. I would love to hear yours. Please feel free to leave feedback. 

Good Luck!