CPI CPI Risk Assessment & Threat Analysis 2

Question 1

Which risk assessment methodology uses a 3×3 or 5×5 matrix to plot likelihood against consequence?

Accepted Answer

Qualitative Risk Matrix

Answer

A qualitative risk matrix plots likelihood on one axis and consequence on the other to visually prioritize risks without requiring precise numerical data.

Question 2

A CPI is asked to assess the 'criticality' of assets during a risk assessment. What does criticality measure?

Accepted Answer

The importance of an asset to the organization's mission and the impact if it were lost or compromised

Answer

Criticality reflects how essential an asset is to operations and how severely its loss would impact the organization's ability to function.

Question 3

What is 'vulnerability' in the context of a security risk assessment?

Accepted Answer

A weakness or gap in security measures that could be exploited by a threat

Answer

Vulnerability is a weakness or deficiency in physical, procedural, or technical security that increases the probability a threat can cause harm.

Question 4

During a threat analysis, a CPI reviews crime statistics for the area surrounding a facility. This activity supports which step of the risk assessment process?

Accepted Answer

Threat identification and likelihood estimation

Answer

Historical crime data provides an empirical basis for estimating the likelihood of criminal threats against a facility in a specific location.

Question 5

What is the primary purpose of a 'residual risk' evaluation after security countermeasures have been implemented?

Accepted Answer

To measure the risk that remains after controls have been applied, ensuring it is acceptable to the organization

Answer

Residual risk is the remaining exposure after controls are applied; it must be evaluated to confirm it falls within the organization's risk tolerance.

(CPI) Certified Professional Inspector Practice Test

(CPI) Certified Professional Inspector Practice Test

CPI CPI Risk Assessment & Threat Analysis 2