CPS Threat Assessment and Risk Management 2 — Questions and Answers
Question 1: What is the difference between a 'threat' and a 'hazard' in risk management?
- There is no meaningful difference
- A threat is intentional while a hazard is unintentional or natural (Correct answer)
- A hazard is more dangerous than a threat
- A threat applies only to people while hazards apply to property
Correct answer: A threat is intentional while a hazard is unintentional or natural
Threats involve intentional harmful acts by an adversary, whereas hazards are unintentional risks such as natural disasters or accidents.
Question 2: Which term describes an individual who has fixated on a protectee but has not yet made a direct threat?
- Active shooter
- Person of concern (Correct answer)
- Imminent threat
- Stalker
Correct answer: Person of concern
A 'person of concern' is someone whose behavior warrants monitoring and assessment but who has not yet communicated a direct threat.
Question 3: In risk management, what does 'consequence' measure?
- The probability that an attack occurs
- The severity of harm if the threat is realized (Correct answer)
- The number of potential threat actors
- The cost of protective countermeasures
Correct answer: The severity of harm if the threat is realized
Consequence measures the impact or severity of harm that would result if a threat were successfully carried out.
Question 4: What is a 'pre-attack indicator' in the context of targeted violence?
- A security alarm that activates before an attack
- Observable behavioral or communications signals that suggest an attack is being planned (Correct answer)
- A warning issued by law enforcement
- A security assessment conducted before an event
Correct answer: Observable behavioral or communications signals that suggest an attack is being planned
Pre-attack indicators are observable behaviors such as surveillance, weapons acquisition, or threatening communications that suggest planning.
Question 5: Which of the following is a proactive risk mitigation strategy in executive protection?
- Responding to incidents after they occur
- Varying routines to reduce predictability and deter targeting (Correct answer)
- Publishing the protectee's schedule online
- Reducing the size of the protection detail to lower costs
Correct answer: Varying routines to reduce predictability and deter targeting
Varying routines and routes reduces predictability, making it harder for a threat actor to plan and execute an attack.
Question 6: What role does 'protective intelligence' play in the risk management process?
- It replaces the need for physical security measures
- It provides actionable information to anticipate and prevent threats (Correct answer)
- It is used only after an incident occurs
- It is limited to background checks on new employees
Correct answer: It provides actionable information to anticipate and prevent threats
Protective intelligence gathers and analyzes information to identify threats early, enabling protective measures before an incident occurs.
What is the difference between a 'threat' and a 'hazard' in risk management?