CPI Cheat Sheet 2026

The 30 highest-yield CPI facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the primary purpose of a 'man-trap' or airlock entry system in a secure facility? → Prevent tailgating and unauthorized access
2. In loss prevention, 'shrinkage' refers to: → The loss of inventory due to theft, damage, administrative error, or vendor fraud
3. Why is regular review important in CPI risk management? → Conditions change and new risks emerge requiring updates
4. A 'covert investigation' is distinguished from an 'overt investigation' in asset protection primarily by: → Whether the investigation subject is aware they are being investigated
5. What role do standard operating procedures play in CPI Forensic Science & Analysis? → Ensuring consistency and quality through documented instructions
6. What is evidence-based practice in CPI Investigation Procedures & Methods? → Integrating research evidence with expertise and client needs
7. What is the primary objective of an asset protection program? → To minimize financial losses from theft, fraud, and operational errors
8. During an inspection, a CPI finds that a key control log shows 12 keys issued but only 10 returned. What should be the inspector's recommendation? → Re-key or replace affected locks and conduct an investigation to locate the missing keys
9. Which lighting type is most effective for perimeter security in outdoor environments? → High-pressure sodium or LED floodlights with motion activation
10. Which of the following is an example of internal theft in asset protection? → An employee voiding legitimate transactions to steal cash
11. What is peer review in CPI Investigation Procedures & Methods? → Quality evaluation by qualified colleagues for improvement
12. How do regulations differ from standards in CPI practice? → Regulations are legally binding; standards are typically voluntary
13. During a security inspection, a CPI finds that emergency exit doors lack proper hardware. Which standard governs life safety exit requirements? → NFPA 101 (Life Safety Code)
14. What does exception-based reporting (EBR) primarily help loss prevention professionals identify? → Anomalous transactions or behaviors that may indicate fraud or theft
15. What is 'vulnerability' in the context of a security risk assessment? → A weakness or gap in security measures that could be exploited by a threat
16. What is the importance of continuing education for CPI professionals in Interview & Interrogation Techniques? → Maintaining current knowledge and adapting to industry changes
17. Under the 'reasonable care' standard in asset protection, a business is primarily obligated to: → Take reasonable steps to prevent foreseeable harm to customers, employees, and assets
18. What is the hierarchy of controls in CPI risk management? → Elimination, substitution, engineering, administrative, then PPE
19. What is the importance of continuing education for CPI professionals in Forensic Science & Analysis? → Maintaining current knowledge and adapting to industry changes
20. In loss prevention, a 'booster bag' refers to: → A specially lined bag designed to defeat Electronic Article Surveillance (EAS) systems
21. What is a corrective action plan in CPI compliance? → A strategy to address deficiencies and prevent recurrence
22. What is peer review in CPI Surveillance & Intelligence? → Quality evaluation by qualified colleagues for improvement
23. How does professional liability insurance protect CPI practitioners? → Covering financial losses from claims of negligence or errors
24. Which type of lock is most commonly recommended for high-security access control in commercial inspections? → High-security deadbolt with anti-pick pins
25. What is evidence-based practice in CPI Interview & Interrogation Techniques? → Integrating research evidence with expertise and client needs
26. Which of the following best describes the role of data analytics in modern loss prevention programs? → Identifying patterns and anomalies in transaction data that may indicate theft or fraud
27. Which risk treatment option involves purchasing insurance or outsourcing to reduce financial exposure? → Risk transference
28. A CPI conducting a threat assessment identifies that a local activist group has publicly threatened a facility. This is an example of which threat category? → External adversarial threat
29. What does residual risk mean in CPI practice? → Risk remaining after all controls are implemented
30. Which access control credential type is considered most vulnerable to cloning attacks? → Low-frequency 125 kHz proximity card (HID Prox)