Investigative Interviews & Legal Proceedings

ASIS CPP Certified Protection Professional

Track your progress as you read

Finished sections get a check mark.

1 Introduction & CPP Exam Overview

CPP Exam Facts & Format Using the Seven Domains + ESRM Study Plan

2 Security Principles and Practices

1.1 Security Program Planning, Organization & Control 1.2 Enterprise Security Risk Management (ESRM) & Security Theory 1.3 Security Industry Standards & Continuous Improvement 1.4 The Security Risk Assessment Process Threats & Risk Analysis Fundamentals Risk Treatment — Strategies & Mitigation External Liaison & Public-Private Partnerships Security Awareness Programs

3 Business Principles and Practices

Security Budgeting & Financial Controls Policies, Procedures, Plans & Directives Measuring & Improving Productivity Security Staffing & Personnel Development Ethics, Governance & Vendor Contract Management

4 Investigations

Managing Investigative Operations Evidence, Surveillance & Specialized Investigations Investigative Interviews & Legal Proceedings

5 Personnel Security

Background Investigations & Screening Workplace Violence Protection Travel Security & Duty of Care Executive Protection Programs

6 Physical Security

Physical Security Surveys, Gap Analysis & PPS Design Perimeter Barriers, Protective Lighting & CPTED Locks, Key Control & Access Control Systems Intrusion Detection Systems & Video Surveillance Security Officers, PPS Integration & Program Management Testing, Auditing & Maintaining Physical Security Systems

7 Information Security

InfoSec Program Surveys & Risk Assessment InfoSec Management, Standards & Records Law Protecting Proprietary Information & Intellectual Property CIA Triad, Authentication, Encryption & Cyber Controls Managing an Integrated InfoSec Program & Awareness

8 Crisis Management

Threat Assessment, BIA & Business Continuity Standards Emergency Planning & Preparedness Crisis Communications, Notification & Exercises Incident Command, EOC & Incident Response Recovery, Resumption & Continuity of Operations

Investigative Interviews & Legal Proceedings

Key Takeaways Explain This Topic AI

An interview is non-accusatory information gathering; an interrogation is an accusatory process aimed at obtaining an admission, and the two require different evidentiary thresholds.

The non-coercive PEACE model (Planning and preparation, Engage and explain, Account, Closure, Evaluation) is designed to gather accurate information rather than to obtain a confession.

Weingarten rights entitle unionized private-sector employees to request union representation in an interview they reasonably believe could lead to discipline; Miranda rights apply only to custodial interrogation by government actors.

Criminal law is prosecuted by the state under a beyond-a-reasonable-doubt standard, while civil law is brought by a private party under the lower preponderance-of-the-evidence standard.

Wrongful termination, discrimination, and harassment claims under employment law such as Title VII can arise directly from a poorly documented or inconsistent internal investigation.

Last updated: July 2026

Interview and Interrogation: Distinct Tools

The CPP exam draws a sharp line between two techniques that are often confused in everyday speech. An interview is a non-accusatory, information-gathering conversation used with witnesses, victims, and subjects alike to establish facts before guilt or involvement is determined. An interrogation is an accusatory process, used only after the investigator has a reasonable factual basis to believe the subject is involved, aimed at obtaining an admission or confession. Modern investigative practice — reflected in frameworks such as the non-coercive PEACE model (Planning and preparation, Engage and explain, Account, Closure, Evaluation) — favors information-gathering interview approaches over confrontational, guilt-presumptive techniques, because non-coercive methods produce information that holds up better under legal challenge and reduce the risk of a false confession. A CPP-level investigator should default to the interview approach and reserve interrogation for situations where the evidentiary threshold and organizational policy support it.

Detecting Deception and Reading the Subject

No single verbal or physical cue reliably proves deception on its own, and the CPP body of knowledge treats deception detection as a skill of pattern and consistency analysis rather than a checklist of isolated tells. Investigators are trained to establish a behavioral baseline early in the interview, then watch for deviations — changes in response latency, inconsistent detail, or shifts in non-verbal behavior — when sensitive topics arise. Cultural background, language fluency, anxiety, and neurodivergence can all produce behaviors that superficially resemble deception cues but are not; a competent investigator accounts for cultural and individual variation before drawing conclusions, and corroborates any deception assessment with independent evidence rather than relying on demeanor alone. For example, direct eye contact is read as a sign of honesty in some cultural contexts and as disrespectful or confrontational in others, and an interpreter or unfamiliar setting can itself elevate observable anxiety without indicating deception. Documenting the baseline and the specific deviation observed — rather than a bare conclusion of deceptive — keeps the assessment defensible if it is later challenged.

Rights of Interviewees

The rights an interviewee holds depend heavily on who is conducting the interview and the person's employment status:

Right Applies To Trigger

Miranda rights Custodial interrogation by law enforcement/government actors Person is in custody and being questioned by police

Weingarten rights Unionized private-sector employees Employee reasonably believes the interview could lead to discipline; may request union representation

Garrity rights Public-sector employees Protects against compelled self-incrimination in an employer-compelled statement

A private security investigator conducting an internal workplace interview is not a government actor and does not administer Miranda warnings; the operative protections for most private-sector interviewees are contractual, union-based (Weingarten), or grounded in the organization's own policy. Investigators must still avoid coercion, false imprisonment, or defamatory statements during the interview, since these expose the organization to civil liability regardless of criminal-procedure rules.

Written Statements and Support to Legal Counsel

A written statement , taken in the subject's own words and signed and dated by the person who gave it, is one of the most durable pieces of evidence an investigation produces, and should be reviewed for accuracy with the person before it is finalized. Investigators support legal counsel by preserving the integrity of every statement and evidence item, maintaining privilege where counsel has directed the investigation, and being prepared to testify to the facts they personally observed or documented — not to conclusions outside their firsthand knowledge. When outside counsel directs the investigation for litigation purposes, work product and communications may be protected by attorney-client privilege or work-product doctrine, but that protection can be waived by careless internal distribution, which is another reason report circulation must follow counsel's instructions rather than the investigator's own judgment.

Criminal vs. Civil Law and Procedure

Security investigations frequently touch both systems, and the CPP must know which applies:

Criminal law is prosecuted by the state; the burden of proof is beyond a reasonable doubt ; the remedy is punishment (fines, imprisonment)

Civil law is brought by a private party; the burden of proof is typically the lower preponderance of the evidence standard; the remedy is monetary damages or injunctive relief

The same underlying conduct — theft, fraud, assault — can generate both a criminal referral and a separate civil claim, and an internal investigation may proceed on a civil/administrative standard even where no criminal charge is filed

Employment Law Considerations

Internal investigations sit directly on top of employment law, and mishandling this layer creates liability independent of the underlying misconduct. Wrongful termination claims arise when an employee is dismissed in violation of a contract, public policy, or anti-retaliation protection; discrimination and harassment claims arise under statutes such as Title VII of the Civil Rights Act, which prohibit adverse action based on protected characteristics. An investigation that is inconsistent, poorly documented, or that fails to protect a complainant from retaliation can itself become the basis of a wrongful-termination or retaliation lawsuit, which is why cross-functional coordination with HR and Legal — established in the earlier investigations sections — is treated as a core competency rather than an optional courtesy.