PSP Risk Management 3

Question 1

How should a physical security professional prioritize risks when multiple threats have been identified?

Accepted Answer

Rank risks by their combined likelihood and potential impact, addressing the highest-rated risks first

Answer

Address the most recently identified threat first

Answer

Focus only on threats that have occurred previously

Answer

Allocate equal resources to all identified risks

Question 2

What role does threat intelligence play in an ongoing risk management program?

Accepted Answer

It continuously updates threat information to ensure risk assessments reflect current conditions

Answer

It is only relevant during the initial risk assessment

Answer

It replaces the need for physical security measures

Answer

It is only useful for government facilities

Question 3

When presenting risk assessment findings to executive management, what format is most effective?

Accepted Answer

Risk-based business cases showing potential losses, countermeasure costs, and return on security investment

Answer

Highly technical reports with detailed sensor specifications

Answer

Verbal briefings with no written documentation

Answer

Compliance checklists with pass/fail ratings

Question 4

What is the significance of establishing risk tolerance levels before conducting a risk assessment?

Accepted Answer

It provides clear criteria for determining which risks require treatment and which can be accepted

Answer

It reduces the cost of the assessment

Answer

It eliminates the need for quantitative analysis

Answer

It satisfies insurance company requirements

Question 5

In risk assessment methodology, what distinguishes a threat from a hazard?

Accepted Answer

Threats involve intentional human action while hazards are typically natural or accidental events

Answer

Threats are always more dangerous than hazards

Answer

Hazards only apply to environmental risks

Answer

There is no difference; the terms are interchangeable

Question 6

What is the MOST important outcome of a comprehensive risk management program?

Accepted Answer

Informed decision-making about security investments that align with organizational risk tolerance

Answer

Zero security incidents

Answer

Complete elimination of all identified risks

Answer

Reduced headcount in the security department