CPI CPI Risk Assessment & Threat Analysis

Question 1

In risk assessment, how is 'risk' formally defined?

Accepted Answer

The product of threat likelihood and the impact (consequence) of that threat

Answer

Risk is fundamentally calculated as the probability (likelihood) of a threat occurring multiplied by its potential consequence or impact.

Question 2

What is the difference between a 'threat' and a 'hazard' in security risk assessment terminology?

Accepted Answer

A threat is an intentional act by an adversary; a hazard is typically an unintentional or natural source of harm

Answer

Threats are intentional acts (e.g., theft, sabotage) while hazards are unintentional or natural events (e.g., fire, flood, equipment failure).

Question 3

A CPI conducting a threat assessment identifies that a local activist group has publicly threatened a facility. This is an example of which threat category?

Accepted Answer

External adversarial threat

Answer

A public threat from an external group is classified as an external adversarial threat, which requires specific countermeasures and monitoring.

Question 4

Which risk treatment option involves purchasing insurance or outsourcing to reduce financial exposure?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial consequence of a risk to a third party, such as an insurer or contracted service provider.

Question 5

In a quantitative risk assessment, what does 'Annual Loss Expectancy (ALE)' represent?

Accepted Answer

The expected financial loss from a specific risk over a one-year period

Answer

ALE is calculated as Single Loss Expectancy (SLE) multiplied by Annual Rate of Occurrence (ARO), representing expected yearly loss from a given risk.

(CPI) Certified Professional Inspector Practice Test

(CPI) Certified Professional Inspector Practice Test

CPI CPI Risk Assessment & Threat Analysis