Security Threats & Risk Management Flashcards

Which concept describes an adversary's capability, intent, and opportunity to carry out an attack?

Answer: Threat assessment triad

A complete threat assessment evaluates three elements together: whether an adversary has the capability, the intent, and the opportunity to conduct an attack.

Which screening method is BEST suited for detecting low-density explosive materials concealed in cargo?

Answer: Explosive Trace Detection (ETD)

ETD samples chemical residue and can detect trace quantities of explosive compounds that may be invisible to physical inspection or X-ray imaging.

A facility's security plan is reviewed and found to have no contingency for a cyberattack on its screening equipment software. This gap represents what type of risk?

Answer: Unaddressed vulnerability creating systemic risk

A missing contingency for a known threat scenario is an unaddressed vulnerability that creates systemic operational risk across the facility.

In a layered security model for cargo screening, what is the purpose of redundancy?

Answer: To ensure that if one security layer fails, another layer still detects the threat

Redundancy ensures that no single point of failure can allow a threat to pass undetected by providing backup detection layers.

Which of the following is an example of a passive security measure in a cargo screening facility?

Answer: Perimeter fencing and access control barriers

Perimeter fencing and barriers are passive measures because they deter and delay threats without requiring active human intervention.

What does 'threat credibility' refer to in a CCSP risk assessment?

Answer: The degree to which intelligence or evidence supports that a specific threat is real and actionable

Threat credibility measures how well-supported by intelligence or evidence a specific threat is, helping prioritize response resources.

A cargo security manager decides to accept a low-probability, low-impact risk rather than invest in expensive countermeasures. This decision reflects which risk management strategy?

Answer: Risk acceptance

Risk acceptance is a deliberate decision to tolerate a risk because its likelihood and impact are low enough that countermeasure costs outweigh the benefit.