Physical Security Assessment & Planning Flashcards

Purchasing an insurance policy to cover losses from theft is an example of which risk treatment option?

Answer: Risk transfer

Insurance shifts the financial burden of a loss to a third party.

In CPTED, which principle is applied by designing windows and lighting so occupants can easily observe parking areas?

Answer: Natural surveillance

Natural surveillance maximizes visibility so legitimate users can observe activity.

What is the main advantage of a performance-based assessment over a purely compliance-based one?

Answer: It measures how effectively the system actually defeats the defined threat

Performance-based methods evaluate system effectiveness against threats using data such as detection probability and delay times.

A security planner uses an 'adversary sequence diagram' (ASD). What is it primarily used for?

Answer: Mapping adversary paths through protection layers to find the most vulnerable path

An ASD models layers and path elements to identify the adversary path with the lowest probability of interruption.

Which of the following best describes 'defense in depth'?

Answer: Using multiple, layered security measures so failure of one does not compromise the asset

Defense in depth uses concentric layers of detection, delay, and response.

When a risk's mitigation cost greatly exceeds the potential loss and the organization chooses to take no further action, this is called:

Answer: Risk acceptance

Risk acceptance is a conscious decision to tolerate a risk, often when controls are not cost-effective.

Which data source is generally MOST useful for establishing the local crime threat profile during an assessment?

Answer: Local law enforcement crime statistics and internal incident reports

Police statistics and internal incident history provide empirical evidence of local threats.