- What Is the CPP Exam and Who Administers It?
- Eligibility Requirements Before You Register
- Step-by-Step: How to Register at Prometric
- Fees, Scheduling Windows, and Seat Availability
- Inside the Exam: Format, Domains, and What You'll Actually See
- Domain-by-Domain Breakdown
- A CPP-Aligned Preparation Timeline
- Prometric Test Center: What to Expect on Exam Day
- After the Exam: Scores, Renewal, and CPE Requirements
- Frequently Asked Questions
- The CPP is administered by ASIS International and delivered exclusively through Prometric testing centers worldwide.
- Registration fees are $350 for ASIS members and $550 for non-members - join ASIS before applying to save $200.
- The exam is 200 questions (175 scored, 25 unscored pretest), computer-based, closed-book, with a 4-hour time limit.
- Security Principles and Practices dominates the exam at 46% of scored content - it must be your heaviest study area.
What Is the CPP Exam and Who Administers It?
The Certified Protection Professional (CPP) is the flagship certification issued by ASIS International, the world's largest association for security management professionals. It is widely regarded as the most rigorous credential available to security directors, corporate security managers, law enforcement professionals transitioning to the private sector, and physical security consultants. Organizations ranging from Fortune 500 corporations to federal contractors and global financial institutions specify CPP certification in job postings for senior security leadership roles.
Unlike narrowly scoped certifications that test a single technology or product, the CPP evaluates a candidate's mastery across the full spectrum of security management - from threat assessment frameworks and emergency response planning to employment law, investigations methodology, and HR security screening protocols. That breadth is exactly why the credential carries so much weight, and why preparation requires more than surface-level review.
If you're researching registration timing, fees, and what you'll encounter behind the keyboard at a Prometric center, this guide covers everything specific to the 2026 examination cycle.
Eligibility Requirements Before You Register
ASIS enforces strict prerequisites, and your application will be audited. Do not pay the registration fee before confirming you qualify - refunds are not automatic if ASIS finds your application incomplete after payment.
Two Pathways to Eligibility
| Pathway | Education Requirement | Total Security Experience | Responsible Charge Requirement |
|---|---|---|---|
| Degree Pathway | Bachelor's degree (any field) | 5 years in security | At least 3 years managing a security function |
| Experience Pathway | High school diploma or equivalent | 9 years in security | At least 3 years managing a security function |
The phrase "responsible charge of a security function" is critically important. ASIS defines this as having direct supervisory or decision-making authority over a security program, budget, personnel, or operation - not merely working within one. A security officer logging shifts does not qualify; a security supervisor managing a team and making operational decisions does. Review the ASIS CPP Application Guide carefully and document your experience in the language ASIS uses during the verification process.
Step-by-Step: How to Register at Prometric
The registration process runs through two platforms - the ASIS portal for application approval, and Prometric's scheduling system for seat booking. Many candidates get tripped up by treating these as a single step. They are not.
- Create or log in to your ASIS account at asisonline.org. All certification applications originate here.
- Complete the CPP application including your education documentation and a detailed work history with employer contact information. ASIS may audit your application by contacting listed supervisors.
- Pay the exam fee - $350 (ASIS member) or $550 (non-member). Payment is required to submit. Applications are not reviewed until payment is confirmed.
- Await ASIS approval. Processing time varies. Plan for several weeks, especially during high-volume periods. You cannot schedule a Prometric seat until ASIS approves your application and issues an authorization-to-test (ATT) notice.
- Receive your ATT via email from ASIS. This contains your eligibility ID and the testing window dates during which you must sit for the exam.
- Schedule your Prometric appointment at prometric.com/asis. Use your eligibility ID to locate available seats at Prometric centers near you. Seats fill quickly in major metropolitan areas - schedule as soon as you receive your ATT, even if your intended test date is weeks away.
- Confirm your appointment and save both your Prometric confirmation number and your ASIS ATT. You will need both on exam day.
Key Takeaway
Do not wait to schedule your Prometric seat. Candidates who receive their ATT and delay scheduling by even two to three weeks may find their preferred testing windows fully booked, especially in Q1 and Q4 when demand peaks. Log into Prometric the same day you receive your ATT.
Fees, Scheduling Windows, and Seat Availability
The CPP exam fee structure is straightforward but has downstream implications candidates often overlook.
- ASIS member fee: $350
- Non-member fee: $550
- Rescheduling fee: Prometric charges a rescheduling fee if you change your appointment within a defined window before your test date. Check the current Prometric policy for ASIS exams - fees and cutoff windows can change.
- No-show or late cancellation: You forfeit your exam fee. ASIS does not grant automatic refunds for missed appointments.
Prometric operates hundreds of testing centers globally, and the CPP is available at most of them. For 2026 specifically, seats in densely populated metro areas (New York, Los Angeles, Chicago, Houston, Washington D.C.) fill faster during Q1 January-March and Q4 October-November. If you're targeting a late 2026 date, initiate your ASIS application early enough to leave at least a 4-6 week buffer between receiving your ATT and your intended test date.
Inside the Exam: Format, Domains, and What You'll Actually See
The CPP is a 200-question, computer-based, closed-book exam with a 4-hour time limit. Of those 200 questions, 175 are scored and 25 are unscored pretest items that ASIS uses to evaluate new questions for future exam versions. You will not be told which 25 questions are pretest items - treat every question as if it counts.
All questions are four-option multiple choice. There is no fill-in-the-blank, no matching, and no drag-and-drop. However, the question style is considerably more sophisticated than simple recall. ASIS writes scenario-based stems that describe a situation - a workplace threat, a budget decision, a suspicious employee incident - and ask you to identify the most appropriate course of action, the correct policy framework, or the most legally defensible response. This format rewards applied understanding over memorized definitions.
The passing score is scaled using the modified Angoff method. ASIS does not publish the exact cut score, and it may shift slightly between exam versions. Plan to demonstrate strong, consistent competency across all four domains rather than banking on borderline performance in multiple areas.
Before exam day, practice under timed, closed-book conditions using realistic question sets. The CPP Exam Prep practice test platform mirrors the format and scenario-based style of the actual exam, which is essential for building the mental fluency required at Prometric.
Domain-by-Domain Breakdown
The CPP is organized around four domains, each with a specific weight in the scored question pool. Understanding these weights is not optional - they are the single most important input to how you allocate your study time.
Domain 1: Security Principles and Practices (46%)
This is the most heavily weighted domain by a substantial margin. Nearly half of your scored questions come from here. Candidates must master threat and vulnerability assessment, security risk management frameworks, physical security design principles, access control systems, alarm and detection technologies, security surveys, emergency management, and crisis response protocols. The ASIS Protection of Assets (POA) manual - part of the CPP Reference Set - is the authoritative source for this domain.
- Risk assessment methodologies and countermeasure selection
- Physical security planning: barriers, lighting, CCTV design principles
- Security program management and metrics
- Emergency and business continuity planning frameworks
- Legal authorities and use of force concepts
Domain 2: Business Principles and Practices (16%)
Security professionals operating at the CPP level must function as business leaders, not just tactical operators. This domain tests financial management concepts (budgeting, cost-benefit analysis, ROI), organizational behavior, project management principles, ethics, contract management, and communication within organizational hierarchies. Expect questions that frame security decisions within budget constraints or executive stakeholder dynamics.
- Security budget development and justification
- Contract administration and vendor management
- Ethical standards in security management
- Organizational structures and reporting relationships
Domain 3: Investigations (16%)
This domain covers the full arc of a professional investigation: case initiation, interview and interrogation techniques, evidence collection and chain of custody, surveillance methods, report writing, legal considerations, and coordination with law enforcement. Questions frequently present scenarios involving employee theft, fraud, workplace violence threats, or information security breaches.
- Interview planning and cognitive interview techniques
- Evidence handling and admissibility standards
- Surveillance: physical, electronic, and digital
- Legal constraints: privacy law, search and seizure in private settings
Domain 4: Personnel Security (22%)
Personnel security covers the human side of security risk - pre-employment screening, background investigations, security awareness programs, insider threat programs, and the intersection of HR policy with security requirements. This domain also addresses workforce violence prevention, termination security protocols, and relevant employment law concepts that affect how security programs operate.
- Background investigation standards and legal limitations (FCRA, EEOC)
- Security clearance concepts and adjudication standards
- Insider threat program design and behavioral indicators
- Workplace violence prevention and threat assessment teams
A CPP-Aligned Preparation Timeline
The following timeline assumes a candidate with solid security experience who needs approximately 10-12 weeks of structured preparation. Adjust based on your existing familiarity with the CPP Reference Set and your weakest domains.
Domain 1: Security Principles and Practices (46%)
- Read and annotate the Protection of Assets chapters aligned to physical security, risk management, and emergency planning
- Build a personal reference sheet for threat/vulnerability/risk terminology
- Complete 30-40 Domain 1 practice questions every 2-3 days; review every incorrect answer against source material
- Dedicate more time here than anywhere else - nearly half your exam lives in this domain
Domain 4: Personnel Security (22%), then Domains 2 & 3
- Study personnel security next given its 22% weight: focus on background investigation law, insider threat frameworks, and workplace violence protocols
- Shift to Investigations (16%): practice scenario questions involving evidence, interviews, and legal constraints
- Finish with Business Principles (16%): concentrate on budget justification, ethics, and project management concepts
Full-Length Timed Practice and Gap Analysis
- Take at least two full 175-question timed practice exams under closed-book, quiet conditions
- Score by domain - not just overall - to identify remaining weak areas
- Use the CPP Exam Prep practice platform to drill specific domain weaknesses identified in your mock exams
- Review the ASIS CPP Reference Set for any domains where your practice scores remain below target
Final Review and Test-Day Readiness
- Limit new material - reinforce what you know rather than introducing unfamiliar concepts
- Run one final timed practice set 3-4 days before your exam; rest the day before
- Confirm Prometric appointment, locate the testing center, and review acceptable ID requirements
Prometric Test Center: What to Expect on Exam Day
Prometric testing centers follow strict protocols that can feel jarring if you haven't tested with them before. Arriving unprepared for the procedural requirements adds unnecessary stress before a demanding 4-hour exam.
- Arrive 30 minutes early. Late arrivals may be turned away with no refund.
- Bring two forms of ID. Your primary ID must be government-issued, current, and include a photo and signature. The name on your ID must match exactly the name on your Prometric registration. A middle initial discrepancy can cause check-in complications.
- No personal items in the testing room. Phones, wallets, watches, and bags are stored in a locker. Some centers allow a clear water bottle; confirm with your specific location beforehand.
- Biometric check-in. Prometric uses digital fingerprinting and palm vein scanning at most centers. You'll be photographed on entry.
- Scratch material provided. You'll receive a laminated notepad and marker, or a small whiteboard. Use the first few minutes of your exam to jot down any frameworks or mnemonics you want available during the session.
- Optional breaks. The clock does not stop during breaks. Calculate whether leaving the room is worth the lost time.
After the Exam: Scores, Renewal, and CPE Requirements
At the end of your Prometric session, you'll receive an unofficial pass/fail result on screen. Official score reports are issued by ASIS separately - typically within a few weeks - and include domain-level performance breakdowns that are valuable whether you passed or need to re-examine.
If you pass, your CPP certification is valid for 3 years. Renewal requires 27 total CPE credits over the cycle - structured as 9 credits per year. ASIS has specific rules about which activities qualify, which sources are pre-approved, and how credits are documented. For a thorough overview of what counts toward your renewal cycle, read our detailed guide on CPP Continuing Education Credits: Approved CPE Sources.
If you do not pass on your first attempt, ASIS allows retakes after a waiting period. Your domain-level score breakdown from the official report is your roadmap - focus exclusively on the domains where your performance was weakest rather than repeating a uniform review of all content.
For a comprehensive overview of how to structure your preparation from application through renewal, visit the CPP Exam Prep practice test platform, where full-length practice exams and domain-specific question sets are organized to mirror the structure described in this guide.
Frequently Asked Questions
Schedule your Prometric seat immediately upon receiving your ASIS Authorization to Test (ATT) notice. In high-demand cities, available seats within your preferred testing window can fill within days of ATT release. Give yourself at least a 4-6 week buffer between receiving your ATT and your intended test date so you have flexibility to choose the seat and location you want.
No. As of the current exam cycle, the CPP is available only at in-person Prometric testing centers. There is no remote proctoring option for this credential. You must appear at a physical Prometric location with valid government-issued ID to sit for the exam.
Your CPP score is calculated from 175 scored items only. The 25 pretest (unscored) questions are embedded throughout the exam to allow ASIS to statistically evaluate new questions before adding them to future scored pools. You cannot identify which questions are pretest items, so treat all 200 questions with equal seriousness.
ASIS uses the modified Angoff method to set the cut score - a psychometric approach where subject matter experts estimate the probability of a minimally competent candidate answering each question correctly. The resulting cut score is scaled and adjusted between exam versions. ASIS does not publish the specific cut score, so there is no reliable public number to target. Focus on consistent, high-level mastery across all four domains.
The CPP Exam Schedule 2026: How to Register at Prometric article you're reading now covers domain weights and timeline structure in detail. For hands-on practice aligned to each domain, the CPP Exam Prep practice platform provides domain-tagged questions so you can measure and target your weakest areas directly.
Ready to Start Practicing?
The CPP is one of the most demanding credentials in the security profession - with 200 scenario-based questions across four domains and a 4-hour clock, there is no substitute for rigorous, timed practice. Start building your exam confidence today with full-length practice tests aligned to the actual CPP domain structure.
Start Free Practice Test