Threat Assessment & Risk Mitigation Flashcards

Security-in-depth refers to:

Answer: Layered, complementary security controls

Security-in-depth uses layered and complementary controls so no single failure exposes information.

An Intrusion Detection System protecting a closed area must be:

Answer: Approved and installed to the required standard, such as UL 2050 central station

IDS for classified storage must meet required standards, commonly UL 2050 for central station monitoring.

What does an alarm response time requirement ensure?

Answer: Quick assessment and response to an alarm to protect classified information

Response times ensure timely assessment and protection after alarm activation.

Which measure best reduces risk of unauthorized visitor access to a classified area?

Answer: Verified visit authorization, escorts and visitor logs

Verifying clearance and need-to-know, escorting and logging visitors reduces access risk.

Which is a primary use of end-of-day security checks?

Answer: Ensuring classified material is properly secured

End-of-day checks confirm classified material is stored and areas secured, often documented on an SF 701 and SF 702.

Employees traveling abroad should be:

Answer: Provided security and threat awareness briefings and reporting foreign travel as required

Foreign travel by cleared personnel must be reported and briefings addressing foreign intelligence threats are advised.

The most effective countermeasure against social engineering is:

Answer: Employee awareness training

Awareness training teaches employees to recognize and resist elicitation and manipulation.