Applied Methods and Techniques Flashcards

In the classic security risk formula, which three elements are combined to estimate risk?

Answer: Threat, vulnerability, and consequence (impact)

Security risk is commonly expressed as a function of threat, vulnerability, and consequence.

A security manager finds a risk whose cost to mitigate far exceeds its potential loss and decides to formally document and live with it. Which risk treatment is this?

Answer: Risk acceptance

Risk acceptance is a conscious, documented decision to tolerate a risk when treatment is not cost-effective.

Which CPTED strategy uses design features such as low hedges, glazing, and lighting so legitimate users can observe activity?

Answer: Natural surveillance

Natural surveillance maximizes visibility so that intruders feel observed.

Under the time-based concept of physical protection, an intrusion is defeated only when which condition is met?

Answer: Detection plus response time is less than the delay the adversary faces after detection

The response force must arrive before the adversary completes the task, so delay after detection must exceed response time.

During a security survey, what is the main purpose of an exit interview with facility management?

Answer: To present preliminary findings and clarify any factual errors before the final report

An exit briefing shares initial observations and lets management correct misunderstandings before the report is finalized.

Which metric is the best leading indicator of a security program's performance rather than a lagging one?

Answer: Percentage of employees who completed security awareness training on schedule

Leading indicators measure activities that predict future outcomes, while incident counts and losses are lagging measures.

A security director is calculating the annualized loss expectancy (ALE) for a threat. Which formula is correct?

Answer: ALE = Single loss expectancy x Annual rate of occurrence

ALE equals the single loss expectancy multiplied by how often the loss is expected each year.