Risk Management & Threat Analysis Flashcards

An employee with authorized access steals proprietary components over several months. What type of threat does this represent?

Answer: Insider threat

An insider threat comes from people with legitimate access who misuse it.

Which of the following is the BEST first step in a security risk assessment?

Answer: Identifying and valuing the assets to be protected

Assets must be identified and valued before threats, vulnerabilities, and controls can be assessed.

In Crime Prevention Through Environmental Design (CPTED), which principle uses sightlines, lighting, and window placement to increase the chance offenders are observed?

Answer: Natural surveillance

Natural surveillance designs spaces so legitimate users can easily see activity.

A security team calculates that a countermeasure costing $15,000 per year will reduce the ALE from $40,000 to $30,000. What should they conclude?

Answer: The control is not cost-justified because it costs more than the $10,000 loss reduction

The $10,000 annual reduction in loss is less than the $15,000 annual cost, so the control is not justified on cost alone.

Which threat category includes earthquakes, floods, and hurricanes in an all-hazards risk assessment?

Answer: Natural

Natural hazards are events arising from environmental or geological processes.

Probability of interruption (PI) in a physical protection system evaluation refers to which concept?

Answer: The probability that the response force arrives in time to stop the adversary

PI is the probability that responders interrupt the adversary before the attack is completed.

A company formally decides not to fund additional controls for a low-impact, low-probability risk and documents the decision. This is called what?

Answer: Risk acceptance

Knowingly choosing to bear a risk without further treatment, with management approval, is risk acceptance.