SSP Cheat Sheet 2026

The 30 highest-yield SSP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. How can organizations monitor risks effectively? → Audits, reviews, and tracking
2. Which document produced during a security design project defines the owner's security objectives, performance criteria, and basis of design decisions? → Basis of Design (BOD) / Security Narrative
3. What is the role of security incident reporting? → Document events for review
4. What is risk management? → Identifying and mitigating risks
5. A Threat Assessment Team (TAT) is BEST described as: → A multidisciplinary group that evaluates and manages reported threats
6. The NFPA 1600 standard primarily addresses which aspect of emergency management? → Business continuity and emergency management program requirements
7. Which regulation governs the storage and handling of hazardous waste at facilities that generate, treat, store, or dispose of such waste? → RCRA Subtitle C
8. The SAFETY Act designation from the U.S. Department of Homeland Security primarily provides security technology providers with: → Liability protections in the event of a terrorist attack
9. What is the significance of whistleblower protection? → Protect reporters from retaliation
10. Which type of smoke detector is most effective at detecting slow, smoldering fires? → Photoelectric detector
11. In the context of SSP certification, what is the most important consideration when implementing physical security design & implementation? → Ensuring alignment with established standards, stakeholder needs, and best practices
12. A security officer discovers a colleague falsifying incident reports. The ethical obligation is to: → Report the misconduct through proper channels immediately
13. A security officer is conducting a vehicle inspection at a facility entrance gate. What is the MAIN objective of this procedure? → To prevent unauthorized persons, contraband, or weapons from entering the facility
14. Which action should HR FIRST take after an employee reports that a coworker made a veiled threat? → Document the report and notify the Threat Assessment Team
15. Which regulation requires mass transit agencies to conduct security assessments and develop emergency response plans? → TSA Security Directives SD-1580-21-01 and related surface directives
16. In video surveillance, what does the term 'pan-tilt-zoom' (PTZ) describe? → A camera that can rotate horizontally, vertically, and magnify the image
17. Which OSHA standard requires employers to develop and implement a written Respiratory Protection Program when respirators are required? → 29 CFR 1910.134
18. Which federal agency leads the National Response Framework (NRF) coordination for domestic incidents? → FEMA (Federal Emergency Management Agency)
19. Which international body developed the Standards and Recommended Practices (SARPs) for aviation security? → ICAO (International Civil Aviation Organization)
20. Which behavioral indicator is most commonly associated with an employee on a pathway toward workplace violence? → Escalating grievances combined with social withdrawal
21. When conducting a Physical Security Assessment, the document that formally authorizes testing activities and limits scope is called a: → Rules of Engagement (ROE)
22. In the context of SSP certification, what is the most important consideration when implementing transportation security standards? → Ensuring alignment with established standards, stakeholder needs, and best practices
23. What is the primary purpose of a Workplace Violence Incident Report? → To document incidents for trend analysis and program improvement
24. The Transportation Worker Identification Credential (TWIC) program primarily applies to which workforce? → Maritime facility and vessel workers requiring unescorted access to secure areas
25. Which intrusion detection sensor is best suited to detecting movement based on changes in ambient heat signatures? → Passive infrared (PIR) sensor
26. What is the role of codes of conduct? → Guide behavior and ethics
27. Which of the following best describes the purpose of a Job Hazard Analysis (JHA)? → Identify hazards associated with each step of a job and determine controls
28. Which interview technique is recommended when speaking with a potentially threatening subject to reduce defensiveness? → Motivational interviewing and active listening
29. Which access control model grants permissions based on an individual's job title and organizational role rather than individual identity? → Role-Based Access Control (RBAC)
30. A security practitioner is developing a pandemic plan. Which continuity strategy is most critical to address in this scenario? → Remote work capability and workforce redundancy