The contingency fee in a bid package is typically set at 10% of the total project cost. This budgetary buffer accounts for unforeseen issues, changes, or risks that might arise during project execution. It is a standard practice in both construction and security system projects.

A (5%) may be insufficient.

C (15%) and D (20%) are considered excessive unless the project has high uncertainty.

Exterior lighting systems should be formally evaluated at installation and then at least annually to ensure proper function, coverage, and maintenance. Routine checks may occur more frequently, but full surveys are typically annual unless conditions dictate otherwise.

A, B, and C may be appropriate for operational checks, but not full surveys.

When issuing weapons to security personnel, policies must clearly define the conditions under which the equipment may be used. This ensures legal compliance, accountability, and safety. Proper use-of-force guidelines are critical in managing liability and operational control.

A (Public perception) is important but secondary.

B and C may be relevant to personnel qualification but not to issuance policies themselves.

A Single Pass System issues a unique, coded pass or badge to an employee, which is retained for continued use during employment. The pass allows access to predefined areas and is typically updated if access rights change or when employment ends.

Gopher is a hypertext-based information retrieval tool that predates the World Wide Web. It uses a series of text-based menus to allow users to navigate and access various types of textual information hosted on servers. It was one of the first attempts at organizing and accessing online information in a user-friendly way.

Consortium (A) refers to a group or association, not a technology.

Hyper-text based tool (B) is descriptive but not the specific name of the system.

Symantec (C) is a cybersecurity software company, unrelated to menu-based text access systems.

The correct answer is A. an unauthorized master key permits access through any lock in the series.

In PSP physical security, locks and key systems are part of structural security measures and access control countermeasures. The ASIS PSP Body of Knowledge includes locks under physical security countermeasure selection and implementation.

A master-keying system allows one master key to open multiple locks within a defined lock series. This is useful for management and emergency access, but it creates a major security risk: if the master key is lost, stolen, duplicated, or otherwise obtained by an unauthorized person, that person can access every lock controlled by that master key. Physical security lock guidance describes this as the most obvious security problem with master keys.

The other options are incorrect:

B is incorrect because master keying generally reduces the number of useful combinations, not increases them.

C relates more specifically to removable-core lock risks, not the main master-keying problem.

D is incorrect because close tolerances usually make picking harder, not easier.

Therefore, the correct answer is A.

Although CPTED focuses heavily on natural surveillance, incorporating mechanical or electronic means such as video cameras enhances visibility and monitoring. Surveillance deters criminal behavior and increases the chance of detection.

B (Brick wall) may obstruct visibility.

C (Planting trees) could obscure lines of sight.

D (Revolving doors) relate more to access control than CPTED surveillance goals.

Probability of detection refers to the likelihood that an intrusion or unauthorized action will be identified by the security system. It is a key performance metric used to evaluate the effectiveness of electronic security components such as sensors and alarms. A high probability of detection means a more reliable system.

A (System validation) is a phase where detection may be measured, but it’s not the definition.

B (Officer response) is unrelated to detection probability.

D (Response timing) is part of delay or intervention, not detection.

Comprehensive Detailed Explanation:

Contingency planning in security and business continuity comprises four key components:

Emergency Response – immediate action to protect life and assets.

Crisis Management – command, communication, and decision-making during crises.

Business Recovery – restoring critical functions temporarily.

Business Resumption – restoring full, normal operations post-disruption.

Other options include irrelevant terms such as “pressure devices” or “under investigation,” which are not core to contingency planning.

Comprehensive Detailed Explanation:

A core element of an effective key control policy is ensuring accountability for all keys. This includes maintaining logs, conducting regular audits, and verifying that issued keys are returned or accounted for. This reduces the risk of unauthorized access and is fundamental in access control strategies.

A and C are arbitrary numeric limits and not standard policy practice.

D may be part of policy but is not as critical as ongoing accountability.