ISP ISP Personnel Security & Insider Threats 2

Question 1

The 'need-to-know' principle in personnel security means:

Accepted Answer

Access to specific information is granted only when operationally necessary for assigned duties

Answer

Any cleared employee may access all information at their clearance level

Answer

Employees need to know all security procedures regardless of role

Answer

Managers must know all employees' personal background information

Question 2

Which process is used to verify that employees only retain access rights appropriate to their current role?

Accepted Answer

Access recertification or entitlement review

Answer

Periodic reinvestigation

Answer

Annual security awareness training

Answer

Visitor log auditing

Question 3

When an employee is terminated, which security action should be taken IMMEDIATELY?

Accepted Answer

Revoking all logical and physical access simultaneously upon departure

Answer

Scheduling a 30-day transition period before revoking access

Answer

Allowing the employee to retain email access to complete handover

Answer

Waiting for HR to file paperwork before notifying IT

Question 4

Social engineering targeting employees is BEST countered by:

Accepted Answer

Ongoing security awareness training and clear reporting procedures

Answer

Restricting all employee communication with external parties

Answer

Installing email filters that block all external messages

Answer

Requiring managers to approve every employee decision

Question 5

What does 'two-person integrity' (TPI) primarily protect against in a personnel security context?

Accepted Answer

A single insider acting alone to commit theft or sabotage of critical assets

Answer

Physical injuries during heavy-lifting tasks

Answer

Cyber intrusions from external threat actors

Answer

Unauthorized photography on the production floor

Question 6

Which federal guideline governs adjudicative standards for personnel security clearances in U.S. industrial environments?

Accepted Answer

The 13 Adjudicative Guidelines (Security Executive Agent Directive 4)

Answer

NIST SP 800-53

Answer

ISO 27001 Annex A

Answer

Title 18 U.S. Code Section 1030