ISP Security Risk Management 2

Question 1

Which risk treatment option involves sharing the financial impact of a risk with a third party such as an insurance provider?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial burden of a risk to another party, typically through insurance or contracts.

Question 2

In the ASIS Risk Analysis framework, what does the term 'vulnerability' specifically refer to?

Accepted Answer

A weakness that could be exploited by a threat

Answer

A vulnerability is a weakness or gap in a security system that a threat agent can exploit to cause harm.

Question 3

A facility security manager discovers that an access control system has not been updated in three years. This situation is best classified as which type of risk factor?

Accepted Answer

Vulnerability

Answer

An outdated access control system represents a vulnerability — a weakness in the security posture that increases exposure to threats.

Question 4

Which qualitative risk analysis method uses structured brainstorming among subject-matter experts to estimate likelihood and impact?

Accepted Answer

Delphi technique

Answer

The Delphi technique gathers consensus estimates from experts through iterative anonymous rounds, making it a qualitative assessment approach.

Question 5

Under the General Duty Clause of OSHA, employers in industrial settings are required to:

Accepted Answer

Provide a workplace free from recognized hazards likely to cause death or serious harm

Answer

The General Duty Clause requires employers to provide a workplace free from recognized serious hazards, forming the baseline obligation for industrial security.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP Security Risk Management 2