Study guide
10.1 Personnel, Package & Vehicle Screening and Visitor/Vendor Policy
ASIS Physical Security Professional PSP
Track your progress as you read
Finished sections get a check mark.
1 Introduction & Exam Overview
1.1 Current PSP Exam Facts 1.2 Eligibility, Fees, Scheduling & Recertification 1.3 Experience-Based Testing, References & Study Approach
2 Assessment Planning & Methods
2.1 Assessment Plan, Stakeholders, Budget & Resources 2.2 Inside-Out, Outside-In, Site-Specific & Functional Models 2.3 Qualitative vs Quantitative Assessment Methods 2.4 Standards, Regulations, Codes & Where to Find Them
3 Asset Identification & Valuation
3.1 Asset Types, Terminology, Value, Criticality & Loss Impact 3.2 Valuing Tangible and Intangible Assets for Operations 3.3 Criticality, Key Areas & Loss-Impact Prioritization
4 Threats, Hazards & Operating Environment
4.1 Criminal, Terrorist, Insider & Sociopolitical Threats 4.2 Natural Disasters, Accidental & Cyber-Physical Hazards 4.3 Geography, Crime, Socioeconomics & Existing Countermeasures 4.4 Neighbors, Competitors, Legal, Reputation & Supply Chain
5 Vulnerability Assessment & Surveys
5.1 Surveys, Interviews, Incident Data, Crime Stats & Benchmarking 5.2 Evaluating Technology, Personnel & Procedures 5.3 Plans, Schematics & Environmental/Site Factors
6 Risk Analysis & Countermeasure Selection
6.1 Risk Analysis Strategies, Principles & Data Interpretation 6.2 Threat/Hazard–Vulnerability Pairing & Loss Event Profiles 6.3 Matching Countermeasures to Specific Risks 6.4 ROI, Total Cost of Ownership, Privacy, PII & Life Safety
7 Performance Requirements & Security Concepts
7.1 Design Constraints & Incorporating Risk Analysis 7.2 CPTED, Defense-in-Depth, 4 Ds & Security Terminology 7.3 Operational, Functional, Performance Requirements, Codes & Metrics
8 Structural Measures & CPTED Application
8.1 Fences, Gates & Perimeter Barriers 8.2 Blast Mitigation, Ballistic Protection & Hostile Vehicle Mitigation 8.3 Lighting, Locks, Doors, Windows & Glazing 8.4 Applying CPTED to Site Planning & Landscaping
9 Electronic Security Systems
9.1 Electronic Access Control Architecture & Credentials 9.2 Biometrics, Electrified Locks, Anti-Passback & Mantraps 9.3 Video Surveillance Design, Storage & Analytics 9.4 Intrusion Detection Sensors & Alarm Communications
10 Screening, Communications, Power & Networks
10.1 Personnel, Package & Vehicle Screening and Visitor/Vendor Policy 10.2 Mass Notification, Audio Comms, Consoles & Central Stations 10.3 Data Storage, Retention, PII & Physical Network Security 10.4 Primary/Backup Power and Copper, Fiber & Wireless Transmission
11 System Design & Project Documentation
11.1 Pre-Design, Schematic, Construction Docs, Calculations & Drawings 11.2 CSI MasterFormat, Owner Standards & AIA MasterSpec 11.3 Systems Integration, Scheduling, Cost Estimation & Value Engineering
12 Pre-Bid Meetings & Solicitation Packages
12.1 Site Visits, RFIs, Substitution Requests & Pre-Bid Meetings 12.2 RFP, RFQ, IFB & Sole Source 12.3 SOW, Timelines, Costs, Personnel & Documentation 12.4 Evaluation Criteria, Technical Compliance & Contracting Ethics
13 Procurement Planning & Vendor Selection
13.1 Procurement Process for Security Goods & Services 13.2 Interviews, Due Diligence, References & Selection 13.3 Project Management Functions in Procurement
14 Installation, Commissioning & Acceptance
14.1 Installation & Inspection Techniques 14.2 Commissioning & Implementation-Phase Integration 14.3 FAT, SAT & Final Acceptance Testing Criteria 14.4 Punch Lists, As-Builts, Config Management & End-User Training
15 Security Personnel Requirements
15.1 Roles, Limits, Proprietary vs Contract Staffing 15.2 Recruiting, KPIs, Discipline & Professional Development 15.3 Post Orders, Uniforms/Equipment & Non-Security Awareness
16 Lifecycle Maintenance & Program Evaluation
16.1 Preventive/Corrective Maintenance, Calibration, Service Agreements & Warranties 16.2 Upgrade Training, System Evaluation & Replacement
10.1 Personnel, Package & Vehicle Screening and Visitor/Vendor Policy
Key Takeaways Explain This Topic AI
A walk-through magnetometer screens people for metal; it does not inspect bags, mail, or cargo sitting beside the portal.
Specify X-ray, hand search, or explosive-trace sampling from the threat, not from lobby aesthetics, and write secondary-search post orders.
Vehicle screening starts before the facade: under-vehicle inspection plus driver, passenger, seal, and bill-of-lading matching.
Visitor and vendor control needs distinct expiring badges, escort rules, loading-dock procedures, and after-hours two-person verification.
The common design failure is a costly personnel portal with no package path and an unstaffed dock that bypasses the lobby.
Last updated: September 2026
Why screening is a design decision, not a lobby accessory
Physical security systems fail in public view more often than they fail in a locked closet. Personnel, package, and vehicle screening —paired with visitor and vendor management —are the Domain 2 Task 2 countermeasures that decide whether an access-controlled door is actually a control or merely hardware people walk around while carrying a carton. A card reader on the inner door does not inspect the crate that arrived at the dock. A camera records the officer who waved a recognized executive’s guest through the portal. On the Physical Security Professional exam, the correct specification is the system of methods plus policy , not the most expensive portal in a brochure.
Start by naming the inspection object . People, bags, mail, handheld packages, and vehicles are different physics problems. A control that is excellent against one object is silent against another. That is why a walk-through metal detector and a loading-dock bill-of-lading check can both be “screening” and still leave a hole if you buy only one of them.
Personnel screening: magnetometers and what they miss
A walk-through magnetometer (walk-through metal detector) is a portal that senses conductive and ferrous metal in a body-sized aperture. You specify zone count, sensitivity, and throughput (people per minute) from the risk assessment and the queue the building will actually produce at shift change. Operators calibrate with the manufacturer’s test object at the start of each shift and after a power bump or sensitivity change. An alarm is not a verdict. It is a prompt for secondary screening with a handheld wand, a consistent scan pattern (head-to-toe, both sides, bags already removed), and a private room when clothing, a religious garment, or a medical device requires it.
Write the medical-device alternative into post orders. People with implanted devices may request a pat-down even when the portal is generally treated as safe. If the officer has to invent that policy in front of a line, you will get both a complaint and a bypass. Same-gender screening, where the facility requires it, is a staffing plan, not a hope.
Know what the portal does not do. It will not find a ceramic blade, a liquid, a powder explosive, or a non-metallic firearm component. It will not inspect the briefcase the visitor sets beside the coil. If the program screens bodies and then waves bags onto the reception counter, the portal is theater. PSP items love that mismatch: capital spent on people, zero process for parcels.
Choose 100 percent versus random screening from threat and labor, and then enforce the choice. Random employee screening can be a legitimate insider-threat measure after legal and labor review. Visitor screening is more often 100 percent because the population is unknown. “Recognized faces skip the portal” is how social engineering walks in beside a director.
Package, mail, and explosive-trace applications
X-ray cabinets and conveyors produce a transmission image. Dual-energy colorization commonly paints organic, inorganic, and mixed materials in different hues so operators hunt for anomalies instead of staring at a grey blob. Operators need initial and recurrent image-interpretation practice. Threat image projection (TIP) inserts fictional threats into live images so supervisors can measure vigilance instead of assuming it. Radiation safety, lead curtains, interlocks, and a place to isolate a suspect bag are part of the specification.
When X-ray is not justified—small office, low threat, no mail volume—a documented hand-search protocol still beats an honor system. Hand search is slower and more invasive; write when it is used (alarm on X-ray, inoperative machine, oversized item) so officers are not improvising.
Explosive trace detection (ETD) is an application decision, not a default lobby fashion. A swab of a bag zipper, vehicle door handle, cargo seal, or mail tray is analyzed, typically by ion mobility spectrometry. Specify ETD where the assessment says blast or high-profile targeting is credible: a high-risk loading dock, a special-event vehicle checkpoint, a mailroom that already manages powder hoaxes. Officers must expect nuisance positives from lotions, fertilizers, and some solvents. The SOP therefore needs a secondary method and a supervisor release—not an automatic building evacuation for every hit, and not a shrug that ignores a hit. ETD does not replace X-ray geometry, and X-ray does not replace chain-of-custody when a package becomes evidence.
Keep incoming mail out of the public lobby when volume or threat warrants a dedicated room. USB sticks and “forgotten” vendor media are packages too; a clean-desk and media-intake rule belongs with the X-ray conversation because a portal will not see stored code.
Vehicle screening and under-vehicle inspection
Vehicle screening starts before the facade . A truck that idles against glass while the officer “will get to it” has already defeated standoff. Low-threat sites use under-vehicle inspection mirrors and a flashlight, plus cabin and cargo looks when the threat warrants. Higher-threat sites specify under-vehicle inspection systems (UVIS) —drive-over cameras with an operator display—and a separate bay so a rejected vehicle can reverse without entering the inner perimeter.
Pair the look-under with identity and cargo matching : driver credential versus bill of lading, trailer seal numbers versus paperwork, passenger count versus the access list. A UVIS image of a clean undercarriage does not prove the cargo matches the purchase order. Pop-up barriers or a serpentine after the checkpoint keep a vehicle from turning the screening lane into a sprint to the lobby. Pedestrian and vehicle lanes should not mix at the same unstaffed opening.
Guard procedures that make hardware a control
Post orders should state who is screened (employees with briefcases included or not—pick one), what happens on alarm, the duress phrase if an officer is being coerced to pass someone, and the rule that an unmanned portal is a closed portal. Two-person integrity at a vehicle gate during high-threat periods is a staffing cost; it is also how you keep one officer from being rushed. Officers do not leave the checkpoint to “just run this badge back to reception.” They radio for a runner. They do not accept a photocopy of a license as identity when the policy requires the physical credential.
Visitor and vendor policy: escort, badges, time limits, docks, after-hours
Visitor and vendor rules fail when they are a paper log in a drawer. A workable program has pre-registration for known visits, government-issued photo ID at reception, a badge that is visually distinct from employee badges (color, large visitor mark, no encoded access unless the visit requires it), and an expiry . Escort rules should be explicit: unescorted visitors only after a briefing and only into pre-approved zones; contractors in mechanical rooms, IDF closets, or roof plants remain escorted or under two-person vendor rules.
Time limits belong in the access-control system so a badge dies at 17:00 even if reception forgot to collect it. Collecting the badge still matters for the next day’s inventory and for the person who would otherwise keep a live sticker for a week.
Loading-dock contractors are not lobby visitors. They arrive with tools, trucks, and often after-hours access. Issue job-limited credentials , inventory tools in and out when theft or device implant is in the threat model, require facilities hot-work permits, and close the dock door except during an active unload. A contractor who props the dock “for a minute” has opened a vehicle-sized hole in the envelope.
After-hours visits need a tighter script. The security operations center or listed central station verifies the visit against a call-ahead list. A second person meets the vendor. Interior doors do not unlock globally because one elevator reader went into unlock. The credential is disabled at job complete—not “Monday when day-shift security comes in.”
Visitor logs, copies of identification, and contractor watchlists are personally identifiable information . Retention and who may view them belong with the data rules in the next sections of this chapter; do not treat the reception binder as unclassified scrap paper.
The expensive-portal trap
The classic failure is capital spend without a package or vendor path: a six-figure magnetometer in a marble lobby, parcel totes and HVAC contractors through an unstaffed dock, and visitor stickers that never expire. If you remember one exam heuristic, remember this: if a person, bag, or vehicle can reach a protected space without meeting a written inspection and a credential rule, the portal you bought is not the countermeasure.
Object Typical method What it catches What it misses Policy that must ride with it
Person Walk-through magnetometer plus wand Ferrous/conductive metal on the body Ceramics, liquids, powders, bags set aside Secondary-search SOP, medical-device alternative, no executive bypass
Handheld bag / laptop tote X-ray or documented hand search Density anomalies, weapons in bags Intent, some composites, items never presented Bags go through the machine, not around the receptionist
Mail / inbound freight X-ray, ETD swab, isolated mailroom Powder/IED indicators, contraband in cartons Unscreened dock bypass Chain-of-custody, separate mail path
Vehicle Mirror or UVIS plus cargo/ID match Under-body devices, extra passengers, seal breaks A clean chassis with false paperwork Standoff before the facade, reject bay, no unmanned lane
Visitor / vendor Distinct expiring badge, escort, dock rules Uncredentialed wandering, after-hours solo trades Shared badges, propped doors Pre-registration, two-person after-hours, tool control