CSS Risk Evaluation & Threat Analysis 4

Question 1

During a risk evaluation, a supervisor identifies a threat but determines that the cost of the countermeasure exceeds the value of the asset at risk. The MOST appropriate risk response is to:

Accepted Answer

Accept the risk and document the decision

Answer

When countermeasure costs exceed asset value, risk acceptance is the rational response — the organization acknowledges and documents the risk without further action.

Question 2

A security supervisor notes that a warehouse has one unsecured loading dock that receives deliveries after hours. In a risk matrix, this scenario would be evaluated by examining both the likelihood of an incident and its:

Accepted Answer

Potential consequence or severity

Answer

Risk matrices evaluate scenarios using two axes: the probability/likelihood of an event occurring and the severity or consequence if it does occur.

Question 3

Which of the following is the BEST example of a proactive threat mitigation strategy?

Accepted Answer

Installing motion-activated lighting before any incidents are reported

Answer

Proactive strategies address vulnerabilities and deter threats before incidents occur, rather than responding after the fact.

Question 4

A security supervisor is tasked with analyzing the risk of workplace violence. Which indicator would MOST warrant escalation to a formal threat assessment?

Accepted Answer

An employee making specific threats against a named coworker

Answer

Specific, targeted threats against identifiable individuals are high-priority indicators that require immediate formal threat assessment and intervention.

Question 5

In the context of threat analysis, a 'threat actor' is best defined as:

Accepted Answer

Any individual or group with the intent and capability to cause harm

Answer

A threat actor is any person, group, or entity that has both the motivation and the capability to exploit vulnerabilities and cause harm.

(CSS) Certified Security Supervisor Practice Test

(CSS) Certified Security Supervisor Practice Test

CSS Risk Evaluation & Threat Analysis 4