Industry Best Practices Flashcards

In security risk assessment terminology, what is a vulnerability?

Answer: A weakness that could be exploited to cause harm to an asset

A vulnerability is a gap or weakness in protection that a threat could exploit.

Which best describes a physical security survey?

Answer: An on-site examination of a facility to identify vulnerabilities and recommend improvements

A security survey is a critical on-site analysis that evaluates current protections and recommends corrective measures.

Under the Incident Command System (ICS), what is considered the optimal span of control for one supervisor?

Answer: Five subordinates

ICS guidance recommends a span of control of three to seven, with five considered optimal.

Granting users only the minimum access rights needed to perform their jobs describes which principle?

Answer: Least privilege

Least privilege limits access to what is strictly necessary, reducing the damage from misuse or compromise.

Which is a recognized best practice in executive protection to reduce predictability?

Answer: Varying routes and departure times

Varying routes and times makes it harder for adversaries to plan surveillance and attacks.

Which approach reflects best practice for an employee security awareness program?

Answer: Ongoing training reinforced through multiple channels

Effective awareness programs are continuous and reinforced, since one-time training fades quickly.

What does the ANSI/ASIS PSC.1 standard address?

Answer: A management system for quality of private security company operations

PSC.1 establishes management system requirements for private security service providers, including respect for human rights.