NCIC Risk Management & Mitigation 3

Question 1

When an analyst applies the 'all-hazards' approach to risk management, this means:

Accepted Answer

Using a comprehensive framework that accounts for all types of threats, hazards, and incidents

Answer

The all-hazards approach ensures plans and assessments address the full spectrum of threats including terrorism, natural disasters, pandemics, and technological failures.

Question 2

In a fusion center environment, 'deconfliction' primarily serves to mitigate which risk?

Accepted Answer

Accidental interference between concurrent law enforcement investigations

Answer

Deconfliction systems prevent agencies from unknowingly operating in the same space, which could compromise investigations or create officer safety hazards.

Question 3

Which risk mitigation technique involves reducing the likelihood that a threat will successfully exploit a vulnerability?

Accepted Answer

Deterrence

Answer

Deterrence reduces the probability of an attack by making potential adversaries believe the costs of action outweigh the benefits.

Question 4

A law enforcement agency discovers a vulnerability in its records management system. The agency decides to accept this risk without mitigation. This is appropriate ONLY when:

Accepted Answer

The cost of mitigation exceeds the potential impact and probability warrants acceptance

Answer

Risk acceptance is a valid strategy only when the cost-benefit analysis shows that the expense or difficulty of mitigation is not justified by the threat level and potential impact.

Question 5

The concept of 'defense in depth' applied to criminal intelligence operations means:

Accepted Answer

Using multiple overlapping layers of security controls so a single failure does not compromise the whole system

Answer

Defense in depth employs multiple independent security layers so that when one control fails, others remain to contain the breach or threat.

(NCIC) National Criminal Intelligence Certification Practice Test

(NCIC) National Criminal Intelligence Certification Practice Test

NCIC Risk Management & Mitigation 3