ISP Security Risk Management 5

Question 1

Which phase of the security risk management cycle involves monitoring implemented controls to verify their continued effectiveness over time?

Accepted Answer

Risk review and monitoring

Answer

Risk review and monitoring is the ongoing phase that ensures controls remain effective as threats, vulnerabilities, and organizational conditions evolve.

Question 2

A security professional performing a criticality analysis ranks assets based on their importance to an organization's mission. Which asset would typically receive the HIGHEST criticality rating?

Accepted Answer

Primary control room for a continuous-process manufacturing line

Answer

The primary control room for continuous-process manufacturing directly governs production and safety systems, making its loss catastrophic to mission continuity.

Question 3

In the context of industrial security risk management, 'consequence analysis' is primarily used to:

Accepted Answer

Estimate the severity of harm or loss resulting from a specific incident scenario

Answer

Consequence analysis evaluates the potential human, financial, operational, and reputational impact of a security event occurring at a facility.

Question 4

Which security risk management concept requires that countermeasures be proportional to the level of risk they are intended to address?

Accepted Answer

Proportionality of response

Answer

Proportionality of response ensures that security investments and countermeasures are appropriately scaled to the magnitude of the risk, avoiding under- or over-investment.

Question 5

During a security assessment, an evaluator finds that employee security training was last conducted 18 months ago. This gap is best categorized as which type of vulnerability?

Accepted Answer

Administrative or procedural vulnerability

Answer

A lapse in required security training reflects a weakness in administrative or procedural controls, which govern human behavior and compliance.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP Security Risk Management 5