Physical Security Assessment & Planning Flashcards

What is the primary output of a well-conducted physical security survey?

Answer: A report of findings with prioritized, cost-justified recommendations

Surveys conclude with documented findings and actionable recommendations prioritized by risk.

Which factor is NOT typically used when assessing an asset's criticality?

Answer: The color of the asset's packaging

Criticality is based on consequence of loss, such as operational, financial, safety, and reputational impact.

Why should a security plan be reviewed and updated periodically?

Answer: Threats, operations, and facilities change over time

Changing threats, business processes, and site conditions can make existing controls inadequate.

An organization relocates a data center away from a flood plain to eliminate flood exposure. This risk treatment is:

Answer: Risk avoidance

Avoidance eliminates the exposure by removing the activity or asset from the risk.

In an interview-based assessment, why is it valuable to speak with front-line staff such as guards and receptionists?

Answer: They often know how procedures are actually followed versus how they are written

Front-line personnel reveal practical gaps between policy and daily practice.

Which statement about cost-benefit analysis of countermeasures is MOST accurate?

Answer: A countermeasure is generally justified when the risk reduction it provides exceeds its total life-cycle cost

Countermeasure selection should weigh the reduced expected loss against acquisition, operating, and maintenance costs.

An assessor walks the perimeter at night to verify lighting coverage and camera image quality. Why is this step important?

Answer: Conditions such as lighting and visibility differ significantly between day and night

Many vulnerabilities, such as dark spots and poor camera performance, appear only after dark.