Physical Security Assessment & Planning Flashcards

In a security risk assessment, which formula best represents how risk is commonly expressed?

Answer: Risk = Likelihood x Consequence (impact)

Risk is typically a function of how likely an event is and how severe its impact would be.

What is the primary purpose of a Design Basis Threat (DBT) in physical security planning?

Answer: To define the adversary attributes and capabilities the protection system must be designed against

A DBT describes the characteristics of the adversary a facility's protection system is designed to defeat.

During a security survey, the assessor finds a perimeter fence with a 6-inch gap at the bottom over soft soil. What is this finding best classified as?

Answer: A vulnerability

A vulnerability is a weakness that could be exploited by a threat.

Which concept describes the principle that an adversary must be detected early enough so that response arrives before the adversary completes the task?

Answer: Timely detection / critical detection point

Detection must occur at or before the critical detection point so that remaining delay exceeds response time.

An assessor compares a site's controls against an accepted benchmark such as ASIS or NFPA guidance. What type of assessment approach is this?

Answer: Compliance-based (checklist) assessment

Compliance-based assessments measure existing conditions against a prescribed standard or checklist.

Which action should occur FIRST when beginning a physical security assessment?

Answer: Identify and prioritize the assets to be protected

Asset identification and prioritization drives the threat, vulnerability, and countermeasure analysis that follows.

A countermeasure that reduces the impact of an event after it occurs, such as a business continuity plan, is primarily a form of which risk treatment?

Answer: Risk mitigation (reduction)

Reducing consequences, like reducing likelihood, is a form of risk mitigation.