14.2 Commissioning & Implementation-Phase Integration

ASIS Physical Security Professional PSP

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 Current PSP Exam Facts 1.2 Eligibility, Fees, Scheduling & Recertification 1.3 Experience-Based Testing, References & Study Approach

2 Assessment Planning & Methods

2.1 Assessment Plan, Stakeholders, Budget & Resources 2.2 Inside-Out, Outside-In, Site-Specific & Functional Models 2.3 Qualitative vs Quantitative Assessment Methods 2.4 Standards, Regulations, Codes & Where to Find Them

3 Asset Identification & Valuation

3.1 Asset Types, Terminology, Value, Criticality & Loss Impact 3.2 Valuing Tangible and Intangible Assets for Operations 3.3 Criticality, Key Areas & Loss-Impact Prioritization

4 Threats, Hazards & Operating Environment

4.1 Criminal, Terrorist, Insider & Sociopolitical Threats 4.2 Natural Disasters, Accidental & Cyber-Physical Hazards 4.3 Geography, Crime, Socioeconomics & Existing Countermeasures 4.4 Neighbors, Competitors, Legal, Reputation & Supply Chain

5 Vulnerability Assessment & Surveys

5.1 Surveys, Interviews, Incident Data, Crime Stats & Benchmarking 5.2 Evaluating Technology, Personnel & Procedures 5.3 Plans, Schematics & Environmental/Site Factors

6 Risk Analysis & Countermeasure Selection

6.1 Risk Analysis Strategies, Principles & Data Interpretation 6.2 Threat/Hazard–Vulnerability Pairing & Loss Event Profiles 6.3 Matching Countermeasures to Specific Risks 6.4 ROI, Total Cost of Ownership, Privacy, PII & Life Safety

7 Performance Requirements & Security Concepts

7.1 Design Constraints & Incorporating Risk Analysis 7.2 CPTED, Defense-in-Depth, 4 Ds & Security Terminology 7.3 Operational, Functional, Performance Requirements, Codes & Metrics

8 Structural Measures & CPTED Application

8.1 Fences, Gates & Perimeter Barriers 8.2 Blast Mitigation, Ballistic Protection & Hostile Vehicle Mitigation 8.3 Lighting, Locks, Doors, Windows & Glazing 8.4 Applying CPTED to Site Planning & Landscaping

9 Electronic Security Systems

9.1 Electronic Access Control Architecture & Credentials 9.2 Biometrics, Electrified Locks, Anti-Passback & Mantraps 9.3 Video Surveillance Design, Storage & Analytics 9.4 Intrusion Detection Sensors & Alarm Communications

10 Screening, Communications, Power & Networks

10.1 Personnel, Package & Vehicle Screening and Visitor/Vendor Policy 10.2 Mass Notification, Audio Comms, Consoles & Central Stations 10.3 Data Storage, Retention, PII & Physical Network Security 10.4 Primary/Backup Power and Copper, Fiber & Wireless Transmission

11 System Design & Project Documentation

11.1 Pre-Design, Schematic, Construction Docs, Calculations & Drawings 11.2 CSI MasterFormat, Owner Standards & AIA MasterSpec 11.3 Systems Integration, Scheduling, Cost Estimation & Value Engineering

12 Pre-Bid Meetings & Solicitation Packages

12.1 Site Visits, RFIs, Substitution Requests & Pre-Bid Meetings 12.2 RFP, RFQ, IFB & Sole Source 12.3 SOW, Timelines, Costs, Personnel & Documentation 12.4 Evaluation Criteria, Technical Compliance & Contracting Ethics

13 Procurement Planning & Vendor Selection

13.1 Procurement Process for Security Goods & Services 13.2 Interviews, Due Diligence, References & Selection 13.3 Project Management Functions in Procurement

14 Installation, Commissioning & Acceptance

14.1 Installation & Inspection Techniques 14.2 Commissioning & Implementation-Phase Integration 14.3 FAT, SAT & Final Acceptance Testing Criteria 14.4 Punch Lists, As-Builts, Config Management & End-User Training

15 Security Personnel Requirements

15.1 Roles, Limits, Proprietary vs Contract Staffing 15.2 Recruiting, KPIs, Discipline & Professional Development 15.3 Post Orders, Uniforms/Equipment & Non-Security Awareness

16 Lifecycle Maintenance & Program Evaluation

16.1 Preventive/Corrective Maintenance, Calibration, Service Agreements & Warranties 16.2 Upgrade Training, System Evaluation & Replacement

14.2 Commissioning & Implementation-Phase Integration

Key Takeaways Explain This Topic AI

Energizing applies power so devices boot; commissioning proves the installed systems operate together to the design intent and the SOC workflow.

Implementation-phase integration includes alarm maps, priority schemes, camera call-up, elevator-recall versus security-override rules, NTP time sync, and badge encoding.

Each subsystem can grant, record, or detect in isolation while the SOC still cannot run an incident because the workflow was never commissioned.

Fire-service elevator recall takes precedence over security floor-restrict or lockdown logic; security must not trap occupants in a car during recall.

Phased occupancy needs a written who-is-live plan: construction cores, occupied floors, and incomplete detection cannot share one unexplained badge population.

Last updated: September 2026

A green LED on a reader is evidence that a circuit has voltage. It is not evidence that the facility can detect, delay, assess, and respond the way the design promised. Independent ExamFinch teaching for published PSP Domain 3 Task 3 knowledge treats commissioning as a planned, documented proof that installed systems operate together to the owner’s operational concept. Energizing is the earlier, narrower act of applying power, booting firmware, and confirming that devices talk. Exam stems that treat those words as synonyms are offering you a trap.

Energizing is not commissioning

Energizing answers: Did we wire it so it lives? Panels take DC, PoE switches light, cameras grab an address, locks cycle, a test badge opens Door 4 in isolation, and a technician smiles at a laptop. That work is necessary. It is also incomplete. A site can be fully energized and still have no usable alarm map, no camera call-up, clocks that disagree by seven minutes, badges encoded in the wrong format, and an elevator that ignores fire recall because a security override was left asserted.

Commissioning answers: Did we install the system the owner bought ? It is a process with a plan, scripts, expected results, exceptions, and sign-off—not a Friday afternoon “we turned it on.” Commissioning walks the security operations center (SOC) workflow: an event appears, it has a priority, a map location, a camera or audio assessment path, an acknowledgment path, and a documented response. If the only person who can run that workflow is the integrator with a service laptop, you energized a product. You did not commission a program.

Write a commissioning plan before the first energize checklist is ticked. The plan names subsystems, interfaces, who witnesses, what “pass” means, and which failures stop occupancy. Energize checklists (polarity, communication, firmware load) feed that plan. They do not replace it.

Implementation-phase systems integration

Design promised interfaces. Implementation is where those interfaces either become muscle memory or become a binder nobody opens. Several integrations show up repeatedly on PSP-style items.

Maps. The SOC graphic must use the same device identifiers as the door and camera schedules, the labels in the ceiling, and the as-built later in this chapter. A beautiful 3-D map that calls Door 4 “Lobby Rear” while the panel says D-04-ACS is a training injury waiting for a forced-open at 02:10. Maps are not decorating. They are how an operator finds the portal without walking the building in the dark.

Alarm priorities. Forced-open, door-held, duress, tamper, communications loss, power supervisory, and video analytics are not equal. Commissioning assigns priority , color, sound, and required action. If every event screams at the same volume, operators learn to silence the queue. If held-open on a break-room leaf outranks a vault forced-open because someone copied a default template, the SOC will fail the first real incident. Priorities belong in the commissioning script, not in whichever panel was programmed last.

Camera call-up. When Door 4 forced-opens, the video management system (VMS) should present the assessment camera (and often a second context view) without the operator hunting a tree of folders. Call-up rules, dwell, and acknowledge behavior are integration, not a luxury codec feature. Analog-era matrix switchers did this with contact closures; modern VMS rules do it with events and camera IDs. If the access panel logs the alarm and the VMS is “working” on a separate wall, you have two products, not an assessment path.

Elevator recall versus security override. Fire-service Phase I recall sends cars to a designated landing when the fire alarm operates; Phase II gives firefighters in-car control. Security floor-restrict, after-hours card control, and “lockdown” outputs that inhibit landings must drop so recall can occur. A security override that traps occupants in a car during recall is a life-safety defect, not a tough-on-intruders feature. Commissioning must test the fire-alarm interface with the elevator contractor and the fire-protection engineer in the room—not a security-only badge test on a Saturday. If the owner wants a security hold on a car, document how that hold yields the instant recall asserts. Exam stems that offer lockdown as a reason to inhibit recall are offering an unsafe answer.

Time sync. Incident reconstruction is a timeline. Access grants, IDS events, and video frames that disagree by minutes are not a record; they are an argument. Network Time Protocol (NTP) (or a site time source feeding NTP) should serve the access control system (ACS), VMS, intrusion detection, and SOC wall. Commissioning checks that a known event—badge at Door 4, camera clip, panel log—shares a timestamp within the tolerance the specification named. Brand diversity is not an excuse for drift. “Close enough for government work” is how a termination investigation loses the clip that mattered.

Badge encoding. Encoding is not a warehouse task you postpone until occupancy. Facility codes, bit formats, smart-card applications versus raw card serial numbers, encoder privileges, and the physical control of the encoding station are implementation controls. A box of cards encoded on a vendor’s default facility code will open any sister site still using that default. Commissioning includes a sample encode, a read-back at a reader, a wrong-format reject, and a documented who-may-encode list. If HR is already badging people onto a construction core that the ACS does not know, you are commissioning a second, unofficial access system.

Phased occupancy and the SOC-workflow trap

Phased occupancy means people live or work in part of the site while other floors are still construction. It is common and it is dangerous when unexplained. Who holds construction cores versus production badges? Which doors are on the live ACS versus carpenter wedges? Is detection complete on the occupied floor, or is a fire watch and a written impairment in place? Commissioning in a phase is not “the east wing cameras have pictures.” It is a who-is-protected statement the owner’s representative signs: these portals are live, these are still construction, these life-safety interfaces are tested, and the SOC knows which alarms are real.

The signature trap of this section is quieter than a dark camera. Each subsystem “works.” Every door grants locally. Every camera records to a share. Every motion sensor trips a light on a keypad. The elevator contractor signed a recall test last month. And yet: the SOC map does not match labels, held-open outranks duress, Door 4 does not call a camera, video is seven minutes off the badge log, and the operator’s playbook still says “call the integrator.” That site was energized. It was not commissioned.

Worked warehouse: Door 4 grants, the dock camera records, the IDS zone on the man-door shows a green ready light. A forced-open at 02:10 prints on a local buffer. Nobody in the SOC sees a map flash, no camera pops, and the night operator is watching a different site’s wall. Investigators later stitch three timestamps by hand. Procurement will say the systems were accepted because “everything worked.” The exam answer is that the workflow was never commissioned.

• Integration What commissioning proves Failure if you only energize
• SOC maps Device IDs match labels, drawings, and operator graphics Alarm with no location
• Alarm priorities Life-safety and duress outrank nuisance held-open Queue blindness
• Camera call-up Assessment view on the alarming portal Two working systems, one blind operator
• Elevator recall vs security Recall preempts floor-restrict and lockdown outputs Occupants trapped in a car
• NTP time sync ACS, VSS, and IDS share a timeline Unusable incident record
• Badge encoding Format, facility code, and encoder control Cards that open the wrong site—or none

Commissioning close-out is a signed package: scripts, exceptions, and a statement that the SOC can run the design. Power-on photos are exhibits. They are not that package.

Loading diagram... Energizing devices versus commissioning the SOC workflow

Use the diagram when a stem says every vendor signed a start-up sheet. Start-up is the left side. The exam question is usually on the right: maps, priorities, call-up, recall, time, encoding, and a drill the operator can repeat without the integrator’s laptop. If phased occupancy is in the stem, ask who is actually protected tonight—not whether a camera on the construction floor has a picture.