CSPM Security Industry-Specific Knowledge 4 — Questions and Answers
Question 1: A security project manager is deploying video surveillance at a transportation hub. Which concept describes the minimum video resolution and frame rate needed to positively identify a person's face from a recorded image?
- Operational Requirement
- Forensic-Grade Imaging Standard
- Minimum Image Quality Standard (MIQS) (Correct answer)
- Evidential Quality Specification
Correct answer: Minimum Image Quality Standard (MIQS)
Minimum Image Quality Standards define the resolution, frame rate, and lighting thresholds required for video to be useful for identification and evidential purposes.
Question 2: Under ICS/SCADA security frameworks, which zone model is most commonly used to segment industrial control systems from enterprise IT networks?
- DMZ-only segmentation
- Purdue Reference Model (ISA-99) (Correct answer)
- Zero-trust micro-segmentation
- NIST CSF tiered architecture
Correct answer: Purdue Reference Model (ISA-99)
The Purdue Reference Model, codified in ISA-99/IEC 62443, defines hierarchical zones from field devices through enterprise IT to guide OT/IT network segmentation.
Question 3: A security PM is managing a project at a nuclear power plant. Which regulatory body has primary jurisdiction over physical security program requirements at US commercial nuclear facilities?
- DHS
- DOE/NNSA
- NRC (Nuclear Regulatory Commission) (Correct answer)
- FERC
Correct answer: NRC (Nuclear Regulatory Commission)
The NRC establishes and enforces physical security regulations for commercial nuclear power plants under 10 CFR Part 73.
Question 4: In retail security, the term 'ORC' (Organized Retail Crime) is distinguished from ordinary shoplifting primarily by what characteristic?
- The dollar value of a single theft incident
- Coordinated theft by groups reselling merchandise for profit (Correct answer)
- Use of weapons during the theft
- Theft by store employees rather than customers
Correct answer: Coordinated theft by groups reselling merchandise for profit
ORC involves coordinated groups that systematically steal merchandise for resale or fencing, making it a professional criminal enterprise rather than opportunistic theft.
Question 5: Which ASIS International standard specifically addresses the baseline competency and training requirements for security management professionals?
- ASIS ORM.1
- ASIS SMS (Security Management Standard) (Correct answer)
- ANSI/ASIS PSC.1
- ASIS BCM.1
Correct answer: ASIS SMS (Security Management Standard)
The ASIS Security Management Standard (SMS) defines organizational and operational requirements for security management programs, including competency benchmarks.
Question 6: When a security project involves international deployments, which voluntary framework from the Montreux Document addresses human rights obligations of private security companies operating in conflict zones?
- UN Guiding Principles on Business and Human Rights
- ICoC (International Code of Conduct for Private Security Providers) (Correct answer)
- Geneva Convention Protocol II
- ASIS PSC.1
Correct answer: ICoC (International Code of Conduct for Private Security Providers)
The ICoC is a multi-stakeholder initiative that establishes human rights and humanitarian law standards for private security providers operating internationally.
Question 7: A security project manager needs to evaluate the effectiveness of a newly installed access control system. Which metric most directly measures the system's ability to deny access to unauthorized individuals?
- False Acceptance Rate (FAR) (Correct answer)
- Mean Time Between Failures (MTBF)
- Throughput Rate
- Card Read Success Rate
Correct answer: False Acceptance Rate (FAR)
The False Acceptance Rate (FAR) measures how often an unauthorized person is incorrectly granted access, directly quantifying the system's ability to deny unauthorized entry.
CSPM Security Industry-Specific Knowledge 4
A security project manager is deploying video surveillance at a transportation hub.
Which concept describes the minimum video resolution and frame rate needed to positively identify a person's face from a recorded image?