PCI Risk Assessment & Loss Prevention Flashcards

What is the primary goal of a security risk assessment in an organizational investigation?

Answer: To identify vulnerabilities and threats that could lead to loss or harm

A security risk assessment systematically identifies vulnerabilities, threats, and potential consequences to help prioritize security measures and prevent losses.

What does loss prevention primarily focus on in a corporate investigation context?

Answer: Preventing theft, fraud, and other financial losses through proactive security measures

Loss prevention encompasses proactive strategies to deter, detect, and prevent theft, fraud, and other financial losses before they occur.

What is 'shrinkage' in the retail loss prevention context?

Answer: The difference between expected and actual inventory, often due to theft or error

Shrinkage represents inventory loss from shoplifting, employee theft, vendor fraud, and administrative errors, and is a key metric in retail loss prevention.

What is a threat assessment in an investigative context?

Answer: An evaluation of potential dangers and the likelihood they will result in harm

Threat assessments evaluate specific threats to determine their credibility and potential severity, helping organizations prioritize protective measures.

Which approach best describes Crime Prevention Through Environmental Design (CPTED)?

Answer: Modifying physical environments to reduce criminal opportunity

CPTED uses physical design elements like lighting, landscaping, and access control to naturally deter criminal activity and reduce vulnerability.

What is the purpose of a vulnerability assessment in security investigations?

Answer: To identify weaknesses in systems, processes, or facilities that could be exploited

A vulnerability assessment identifies security weaknesses before they can be exploited, allowing organizations to address gaps proactively.