AMPP Cathodic Protection Program (CP1–CP4) — Study Guide

AMPP Cathodic Protection Program (CP1–CP4) — Study Guide

Credential: AMPP Cathodic Protection certification — CP1 Tester < CP2 Technician < CP3 Technologist < CP4 Specialist Issuing body: AMPP — Association for Materials Protection and Performance (formed January 2021 by the merger of NACE International and SSPC) Jurisdiction: Global (130+ countries, 40,000+ members) Prerequisites: Course + certification exam(s) at each level; documented CP work experience per level (application within the completion window after passing); progressive — each level builds on the prior Renewal: Recertification application and approval every 3 years

Cathodic protection is applied electrochemistry: you make the structure the cathode of an electrochemical cell so that it cannot corrode. Every exam question is a variation on measuring, interpreting, and controlling that cell.

1. Pathway — How the Certification Is Earned

1. CP1 — Cathodic Protection Tester. Entry level: take the CP1 course and pass the certification exam. Competency = observe, record, measure: structure-to-electrolyte potentials, rectifier readings, test-station measurements. No design authority.
2. CP2 — Cathodic Protection Technician. Intermediate: CP2 course + exam + documented field experience. Competency = operate and maintain CP systems, perform advanced field tests, troubleshoot basic problems, recognize conditions needing higher-level support.
3. CP3 — Cathodic Protection Technologist. Advanced: technologist-level theory + case-based exams + documented experience. Competency = lead testing/survey programs, interpret data with understanding of the underlying electrochemistry, perform basic-to-intermediate galvanic system designs on single structures, supervise CP2 work, recognize when CP4 oversight is required.
4. CP4 — Cathodic Protection Specialist. Expert: the highest level — system design, complex troubleshooting, stray-current/interference analysis, specifications. Competency = full design authority and program ownership.

Each level requires the course, the exam, and an approved application documenting work experience and education. The ladder is deliberately scoped: a CP1 must not design systems or dictate modifications — operating outside your level is both an exam ethics topic and a professional liability.

2. Knowledge Domains

Domain A — Corrosion and electrochemical fundamentals (all levels, deepest at CP3/CP4)

The corrosion cell. Four required elements: anode (oxidation — metal dissolves: Fe → Fe²⁺ + 2e⁻), cathode (reduction — typically oxygen reduction O2 + 2H2O + 4e⁻ → 4OH⁻ in aerated environments, or hydrogen evolution 2H⁺ + 2e⁻ → H2 in acidic/anaerobic), electrolyte (ionic path — soil, water, concrete pore solution), and electronic path (the metal itself). Remove any one and corrosion stops — CP works by manipulating the cell, not by removing elements.

Why CP works (the mixed-potential argument). A corroding metal sits at its corrosion potential E_corr where anodic and cathodic reaction rates balance. Impressing external current (or coupling to a more active galvanic anode) shifts the structure's potential in the electronegative (cathodic) direction, suppressing the anodic dissolution rate exponentially (Tafel kinetics: each ~decade of current density shifts potential by the Tafel slope, typically 60–120 mV/decade). The protection criterion of −850 mV vs Cu/CuSO4 (CSE) for steel in soil is the empirical potential at which the corrosion rate becomes negligible — it is the most-tested number in the entire CP program.

Galvanic series vs electromotive series. The EMF series ranks metals by standard potentials in ideal solutions; the galvanic series ranks them by measured potentials in a specific environment (seawater, soil). CP design uses the galvanic series — because films, passivity, and environment shift real potentials far from standard values. Magnesium (~−1.55 V CSE), zinc (~−1.10 V CSE), aluminum alloys (~−1.05 to −1.15 V CSE) are the practical galvanic anode materials; steel sits around −0.50 to −0.80 V CSE depending on aeration.

Polarization. Activation polarization (reaction kinetics — Tafel behavior), concentration polarization (diffusion-limited, e.g., oxygen transport to the cathode in soil), and resistance polarization (IR drop through the electrolyte). Understanding which dominates tells you what a potential measurement actually means — and IR drop is the central measurement-error topic (below).

Domain B — CP systems: galvanic vs impressed current (CP1–CP3 core)

Galvanic (sacrificial) systems. Anodes of Mg, Zn, or Al alloys coupled directly to the structure. Driving voltage is fixed by the galvanic potential difference (~0.3–0.7 V usable). Advantages: simple, no power, self-regulating current, low maintenance. Limits: low driving voltage → only for low-resistivity environments and modest current demand; anode consumption is the design life (Faraday's law — below). Typical uses: short pipelines, well casings, water tanks, localized protection, marine structures with Al/Zn.

Impressed current systems. A rectifier (DC power supply) drives current through inert anodes (mixed-metal-oxide/titanium, graphite, high-silicon cast iron, platinized). Driving voltage is adjustable (up to tens of volts). Advantages: high current output, works in high-resistivity soils, adjustable, long anode life. Components the exam tests: rectifier (transformer-rectifier unit — know taps, selenium vs silicon stacks conceptually, and how to read/adjust output), anode bed (deep-well vs shallow groundbed), cable and junction boxes, test stations (structure connection, reference electrode, coupon). Typical uses: long pipelines, large tank farms, high-resistivity soils.

Design current density. Bare steel in soil: ~1–2 mA/ft² (10–20 mA/m²); well-coated steel: 0.05–0.5 mA/ft² depending on coating quality and age (coating efficiency degrades — design for end-of-life, not day one). Seawater: higher (bare steel ~5–10 mA/ft² initial, dropping as calcareous deposits form). The exam tests why coated structures need less current and why design must assume coating degradation.

Domain C — Measurements and criteria (the CP1/CP2 heartland, CP3 interpretation)

Reference electrodes. Cu/CuSO4 (CSE) — the soil/pipeline standard; Ag/AgCl — seawater/concrete; Zn — permanent buried reference (stable but less precise). Know the conversions: Ag/AgCl (seawater) ≈ CSE − 50 mV... the exam tests that you convert before comparing to criteria. A measurement without a stated reference electrode is meaningless.

The −850 mV criterion (CSE). Structure-to-electrolyte potential ≤ −850 mV vs CSE, with CP applied, indicates protection for steel. Variants: −850 mV instant-off (IR-drop-free — measured immediately after interrupting all current sources); 100 mV polarization (a ≥100 mV cathodic polarization shift from the native/depolarized potential — useful where −850 mV is unreachable, e.g., in high-resistivity soils or on old bare pipe). Know which criterion applies when: −850 mV on is the workhorse; instant-off where IR drop is significant; 100 mV polarization where native potentials are already very negative (anaerobic soils with sulfate-reducing bacteria can sit at −700 mV natively).

IR drop — the measurement trap. The measured "on" potential = true polarized potential + IR drop through the electrolyte (V = I × R_soil). In high-resistivity soils or near anodes, IR drop can be hundreds of mV — a reading of −1,100 mV "on" might be only −800 mV of true polarization: unprotected despite the impressive number. Mitigation: instant-off measurements (interrupt current, read before depolarization — the true polarized potential), close-interval surveys with interruption, coupons (a small steel coupon connected to the structure, disconnected for measurement — gives IR-free potential). CP2/CP3 exams hammer this: never trust an "on" reading near an anode bed.

Stray current and interference. DC transit systems, foreign pipelines' CP systems, telluric currents: stray current discharging from a structure causes rapid localized corrosion (Faraday's law — 1 amp discharging for a year dissolves ~20 lb of steel). Detection: potential fluctuations correlated with the source (transit schedules), current-direction measurements. Mitigation: drainage bonds (controlled return of stray current to its source), sacrificial anodes at discharge points, isolation. Dynamic stray current (transit) is the hardest — the exam tests recognition of the fluctuating-potential signature.

Survey types. Close-interval potential surveys (CIS — on/off readings every few feet along a pipeline, the integrity workhorse), DCVG/ACVG (direct/alternating current voltage gradient — coating-defect location), Pearson survey (legacy coating survey), cell-to-cell surveys. Know what each finds: CIS finds protection gaps; DCVG finds coating defects; neither replaces the other.

Domain D — Design calculations (CP3/CP4)

Anode resistance (Dwight's equation, single vertical anode): R (ohms) = (ρ / 2πL) × [ln(8L/d) − 1], where ρ = soil resistivity (ohm-cm, converted consistently), L = anode length, d = anode diameter. Multiple anodes in parallel: divide by N and apply a paralleling/interference factor (anodes too close together shield each other — spacing ≥ ~10–15 ft typical for groundbeds). Why it matters: anode-bed resistance sets the rectifier voltage requirement (V = I × R_total).

Faraday's law / anode consumption: mass loss (lb) = (I × t × W) / (F × ... ) — in field units: weight loss (lb/yr) = current (A) × consumption rate (lb/A-yr). Consumption rates: Mg ≈ 17 lb/A-yr (at 50% efficiency), Zn ≈ 24–26, Al ≈ 11–12, high-silicon cast iron ≈ 1–2 (impressed current, much lower because it's nearly inert). Design life = usable anode mass ÷ annual consumption. The exam tests both directions: size anodes for a design life, or compute remaining life from current output.

Rectifier sizing: V_required = I_total × (R_anode_bed + R_cable + R_structure_path) + back-EMF (structure polarization, ~1–2 V). Select the next standard rectifier size up (voltage and current taps). Undersized rectifiers run at 100% tap with no adjustment headroom — a classic design failure as coating degrades and current demand rises.

Attenuation (pipeline). Potential decays with distance from the drain point: the characteristic attenuation length depends on coating resistance and soil resistivity. Long pipelines need distributed anodes or multiple rectifiers — one drain point cannot protect 50 miles of pipe (the exam tests this conceptual limit).

Domain E — Safety, commissioning, and documentation

Electrical safety around rectifiers (AC input, DC output — lockout/tagout), deep-well drilling hazards, confined spaces at tank sites, hydrogen evolution at overprotected structures (overprotection → hydrogen embrittlement risk on high-strength steels and coating disbondment — the exam tests that more negative is not always better; the −1,200 mV region invites trouble). Commissioning: native readings before energizing, then polarized readings after depolarization/polarization stabilization (days to weeks — instant readings lie). Documentation: the survey record is the legal evidence of protection — falsified readings are a career-ending ethics violation (see ethics below).

3. Key Equations (with units and assumptions)

• Ohm's law in the cell: V = I × R. I in amps, R in ohms, V in volts. The entire IR-drop problem.
• Dwight (single vertical anode): R = (ρ/2πL)[ln(8L/d) − 1]. ρ in ohm-cm → convert to ohm-m consistently (1 ohm-cm = 0.01 ohm-m); L, d in consistent length units. Assumption: homogeneous soil, anode fully in the electrolyte.
• Anode life: life (yr) = usable mass (lb) ÷ [current (A) × consumption rate (lb/A-yr)]. Assumption: constant current; real systems vary — design with margin.
• Steel loss from stray current: ~20 lb per amp-year (from Faraday's law: 1 A × 1 yr = 31.5 MC; Fe → Fe²⁺ needs 2 e⁻ per atom). Assumption: 100% of current discharges as corrosion (worst case).
• Potential conversion: E vs CSE = E vs Ag/AgCl + (reference offset). Know your electrode pair; never compare unconverted readings to the −850 mV criterion.
• Tafel: η = β log(i/i0). η = overpotential (V), β = Tafel slope (~0.06–0 ..12 V/decade), i = current density. Assumption: activation control. Explains why potential criteria work — potential shift is logarithmic in protection current.

4. Worked Examples

Example 1 — Criterion check. A pipeline test station reads −920 mV vs CSE with the rectifier on, and −780 mV instant-off. Protected? Step-by-step: The "on" reading (−920 mV) beats −850 mV, but it includes IR drop. The instant-off reading (−780 mV) is the true polarized potential: −780 > −850 → not protected by the −850 mV instant-off criterion. Lesson: the 140 mV of IR drop was hiding a protection gap. Next step: check the 100 mV polarization criterion — native (depolarized) potential needed; if native was −600 mV, polarization = 180 mV ≥ 100 mV → protected by the alternative criterion.

Example 2 — Anode bed resistance. A groundbed has 6 vertical high-silicon cast-iron anodes, each 5 ft long × 3 in. diameter, in 3,000 ohm-cm soil. Step-by-step: Single anode: R = (ρ/2πL)[ln(8L/d) − 1]. Convert: ρ = 3,000 ohm-cm = 30 ohm-m; L = 5 ft = 1.524 m; d = 3 in. = 0.0762 m. ρ/2πL = 30/(2π × 1.524) = 3.13 ohms. ln(8 × 1.524/0.0762) = ln(160) = 5.08. R_single = 3.13 × (5.08 − 1) = 12.8 ohms. Six in parallel ≈ 12.8/6 = 2.13 ohms, times a paralleling factor (~1.2 for interference) ≈ 2.6 ohms. Lesson: with a 10-A design current, the bed alone needs ~26 V — rectifier selection starts here.

Example 3 — Galvanic anode life. A 32-lb magnesium anode protects a short pipeline section, discharging at 80 mA average. Step-by-step: Mg consumption ≈ 17 lb/A-yr at 50% efficiency; usable mass ≈ 50% of 32 lb = 16 lb (half the anode is core/consumed-unevenly allowance). Life = 16 ÷ (0.080 × 17) = 16 ÷ 1.36 ≈ 11.8 years. Lesson: this is why galvanic designs state design life — the anode is a consumable with a clock.

Example 4 — Stray current damage rate. A pipeline picks up 2.5 A of DC transit stray current that discharges at a single coating defect. Step-by-step: Steel loss ≈ 20 lb/A-yr × 2.5 A = 50 lb/yr — concentrated at one defect, i.e., a penetration rate that can perforate pipe wall in months. Lesson: stray-current discharge is the fastest corrosion mechanism in the CP world; it justifies drainage bonds as emergency-grade mitigations.

Example 5 — Rectifier sizing. A pipeline needs 12 A total. Anode-bed resistance 2.5 ohms, cable/structure path 1.0 ohm, back-EMF 2 V. Step-by-step: V = 12 × (2.5 + 1.0) + 2 = 44 V. Select the next standard size up — e.g., a 50 V / 15 A rectifier — leaving tap headroom for coating degradation. Lesson: sizing exactly to the calculation guarantees a maxed-out rectifier in five years; headroom is design, not waste.

5. Standards/Regulations Cross-Reference

• AMPP/NACE SP standards (legacy NACE SP0169 — corrosion control of underground/submerged piping — and its AMPP successors): the criteria document behind the −850 mV / 100 mV rules. The exam's criteria questions are SP0169 questions.
• NACE SP0285 / SP0177 (underground corrosion control design): design-practice references for CP3/CP4-level work.
• ISO 15589 (petroleum/natural gas — cathodic protection of pipeline systems): the international counterpart; CP4 candidates working globally should know both exist.
• 49 CFR Part 192 (gas) / 195 (hazardous liquids) — US DOT pipeline safety: requires CP on regulated pipelines and sets compliance criteria. This is the regulation that makes CP legally mandatory on US pipelines — the exam's "why does anyone pay for this" answer.
• EPA UST rules (40 CFR 280): underground storage tanks require corrosion protection — CP or nonmetallic; CP tester credentials (CP1-level competence) appear in state UST operator rules.
• NACE MR0175/ISO 15156 (sour service materials): adjacent but distinct — CP interacts with sour-service cracking risks (overprotection + H2S + high-strength steel = trouble). Covered by the AMPP MR0175 Certified User credential (see good-to-know guide).

6. Pitfalls & Trap Patterns

1. "On" vs instant-off. Any question giving both readings is testing IR drop. The instant-off reading is the truth; the "on" reading is the trap.
2. Reference electrode conversions. A −800 mV reading vs Ag/AgCl is not comparable to −850 mV CSE until converted. Questions omit the conversion step deliberately.
3. More negative ≠ better. Overprotection causes coating disbondment (cathodic disbondment) and hydrogen embrittlement of high-strength steels. The exam tests the upper bound of wisdom, not just the −850 mV floor.
4. CP1 scope limits. Ethics/scope questions: the CP1 who "adjusts the rectifier to fix the readings" has exceeded competence. Record and report.
5. Galvanic vs impressed selection. Low-resistivity + low current → galvanic; high-resistivity or high current → impressed. Questions give soil resistivity and current demand; match the system.
6. Depolarization time. After interrupting current, potentials decay over hours–days. A "native" reading taken 5 minutes after shutoff is still polarized — the 100 mV criterion needs a truly depolarized baseline.
7. Dry wheeling. Recording readings without taking them — falsification. The exam's ethics questions treat this as the unforgivable sin, because the survey record is legal evidence of pipeline safety.

Exam strategy: CP1/CP2 are measurement-heavy — know the instruments (multimeter, reference electrode, shunt for current) and the criterion numbers cold. CP3 adds calculation (Dwight, Faraday, rectifier sizing) and case interpretation — practice with the numbers until the units work themselves. Memorize vs derive: memorize the criteria (−850 mV, 100 mV, consumption rates); derive everything else from Ohm's law, Faraday's law, and the corrosion cell.

7. Practice Problems

1. A test station reads −1,050 mV on / −880 mV instant-off vs CSE. Does the location meet the −850 mV instant-off criterion? What does the 170 mV difference represent? Answer: Yes — −880 mV is more negative than −850 mV. The 170 mV difference is IR drop in the electrolyte.

2. Size the design life: a 48-lb zinc anode (50% usable) discharging at 120 mA. Zinc consumption ≈ 25 lb/A-yr. Answer: Usable = 24 lb. Annual loss = 0.120 × 25 = 3.0 lb/yr. Life = 24 ÷ 3.0 = 8 years.

3. Why can't a single rectifier protect a 40-mile pipeline, even if sized for the total current? Answer: Attenuation — potential decays with distance from the drain point due to the pipe's longitudinal resistance and coating conductance. Remote sections stay unprotected. Distributed anodes/rectifiers are required.

4. A pipeline's native potential is −650 mV CSE; polarized (instant-off) it reads −760 mV. Which criterion is met? Answer: −850 mV: no (−760 > −850). 100 mV polarization: shift = 110 mV ≥ 100 mV — yes, protected by the polarization criterion.

5. Name three consequences of chronic overprotection (potentials far more negative than −1,100 mV CSE). Answer: Cathodic disbondment of coatings, hydrogen embrittlement of high-strength steels, and wasted anode/rectifier capacity (plus accelerated anode consumption).

6. A CP1 tester finds potentials fluctuating ±200 mV in sync with a nearby light-rail schedule. What is the likely phenomenon, and what is the tester's correct action? Answer: Dynamic DC stray-current interference from the transit system. Correct action: document the fluctuating readings accurately with timestamps and escalate to CP2/CP3/CP4 — not attempt mitigation.

7. Convert: a structure reads −900 mV vs Ag/AgCl (seawater). Approximately what is this vs CSE, and does it meet −850 mV CSE? Answer: Ag/AgCl (seawater) is roughly 50 mV more negative than CSE at the same potential, so −900 mV Ag/AgCl ≈ −850 mV CSE — borderline; it just meets the criterion (know your exact electrode conversion; exam questions specify it).

Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.