CSPM Security Industry-Specific Knowledge 3

Question 1

A security project manager is overseeing deployment of an intrusion detection system at a financial institution. Which regulation most directly requires the institution to implement controls that detect unauthorized access to customer financial information?

Accepted Answer

Gramm-Leach-Bliley Act (GLBA) Safeguards Rule

Answer

The GLBA Safeguards Rule requires financial institutions to implement administrative, technical, and physical safeguards—including access detection—to protect customer financial data.

Question 2

Under the ICD 705 standard, what is the primary purpose of a Sensitive Compartmented Information Facility (SCIF) accreditation?

Accepted Answer

To certify that the facility meets physical and technical construction standards for handling classified SCI

Answer

ICD 705 accreditation confirms the SCIF meets the physical, technical, and administrative construction standards required to protect SCI from unauthorized disclosure.

Question 3

Which private security regulatory body in the US issues model licensing legislation that many states use as a template for guard and investigator licensing?

Accepted Answer

ASIS International

Answer

ASIS International publishes model private security licensing legislation and advocates for consistent state-level standards across the industry.

Question 4

A hospital's security project team is installing access control on psychiatric units. Which federal law most directly restricts how security footage and incident records involving patients may be used?

Accepted Answer

HIPAA Privacy Rule

Answer

The HIPAA Privacy Rule governs the use and disclosure of protected health information, which includes security records that identify patients.

Question 5

In loss prevention terminology, what does 'shrinkage' specifically measure in a retail security context?

Accepted Answer

Inventory loss from theft, error, fraud, and supplier issues

Answer

Shrinkage is the retail industry term for inventory loss caused by shoplifting, employee theft, administrative errors, and vendor fraud.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM Security Industry-Specific Knowledge 3