CSS CSS Threat Intelligence and Risk Communication 2

Question 1

Which risk communication framework is most useful when helping a client prioritize which security gaps to address first?

Accepted Answer

A risk matrix that plots likelihood of occurrence against severity of impact

Answer

A risk matrix allows both the CSS and the client to visualize which threats require immediate action based on probability and potential impact, enabling prioritized investment.

Question 2

A CSS should update threat intelligence presentations for existing clients primarily because:

Accepted Answer

The threat environment evolves continuously, and clients' risk exposures change over time

Answer

The threat landscape shifts as criminal methods evolve, new vulnerabilities emerge, and clients' businesses change, requiring updated risk communications to remain relevant.

Question 3

When a CSS references an ASIS International guideline in a client presentation, it serves to:

Accepted Answer

Demonstrate that your recommendations align with recognized professional security standards

Answer

Citing ASIS guidelines shows that your security recommendations are grounded in standards developed by the leading professional organization in physical security.

Question 4

Which term describes the process of quantifying potential financial losses from security incidents to justify a proposed security investment?

Accepted Answer

Annual loss expectancy (ALE) analysis

Answer

Annual loss expectancy combines the frequency and financial impact of potential incidents to produce a dollar figure that can be compared directly to the cost of security controls.

Question 5

A CSS presenting to a financial institution about tailored security risks should most prominently feature:

Accepted Answer

Robbery patterns, ATM attacks, data room physical security, and bank-specific regulatory security requirements

Answer

Effective threat intelligence is sector-specific; financial institutions face distinct threats including robbery, ATM skimming, vault security, and physical safeguard compliance unique to their industry.

(CSS) Certified Security Salesperson Practice Test

(CSS) Certified Security Salesperson Practice Test

CSS CSS Threat Intelligence and Risk Communication 2