ANSI / ASIS PAP.1-2012 Physical Asset Protection APP Practice Exam

Nonconformity is the term for the non-fulfillment of a requirement. In asset protection and audits, it describes any instance where a process, control, or document fails to meet a specified standard or requirement. Recognizing nonconformities helps identify gaps that must be corrected to bring practice into alignment with the rule or standard, and they often trigger corrective actions to prevent recurrence.

An objective is what you aim to achieve, not a shortfall. A policy is the formal rule or guideline you follow, not the act of not meeting a requirement. Physical security refers to the overall field of protecting people and assets, not to the failure to meet a requirement.