Risk Management & Threat Analysis Flashcards

Which tool graphically traces the most vulnerable route an adversary could take from outside a facility to a target?

Answer: Adversary sequence diagram (path analysis)

Adversary sequence diagrams model protection layers and paths to identify the most vulnerable route.

According to the principle of timely detection, where should detection ideally occur along an adversary's path?

Answer: As early as possible, at the outer layers

Early detection maximizes the remaining delay time available for response.

Which risk formula is most commonly used in security risk assessments?

Answer: Risk = Threat × Vulnerability × Consequence

Risk is widely modeled as a function of threat, vulnerability, and consequence.

A risk register is primarily used for which purpose?

Answer: Documenting identified risks, owners, ratings, and treatment status

A risk register tracks identified risks, their assessments, owners, and treatment actions.

Which source of information is MOST useful for estimating the likelihood of crime at a new facility site?

Answer: Local law enforcement crime statistics and incident history

Local crime data and incident histories provide an evidence base for likelihood estimates.

Why is a security risk assessment repeated periodically rather than done once?

Answer: Threats, assets, and vulnerabilities change over time

Changes in operations, threat environment, and facilities alter the risk picture and require reassessment.

An adversary with high motivation, inside knowledge, and specialized tools would be rated how in a threat assessment compared to a casual vandal?

Answer: Higher threat capability requiring stronger protection

Threat level is driven by adversary intent, capability, and knowledge, so a skilled motivated insider is a higher threat.