DSM1224(1) SECURITY RISK MANAGEMENT

Multiple Choice

Which agency is NOT a risk management accreditation body?

• ASIS International (ASIS)

• American National Standards Institute (ANSI)

• The Risk Management Society (RIMS)

• International Standard Organisation (ISO)

• Royal Malaysia Police (PDRM)

Match

Match the following

• Elements leading to risk for example flood statistics by MET Malaysia

• Circumstances such as Selangor flooding

• Outcome for example the fatalities from slow response during flooding

• Chance of something happening such as continuous rain warning indicates flood risk

Risk source

Potential event

Consequence

Likelihood

• Risk source

• Potential event

• Consequence

• Likelihood

Multiple Choice

Which is NOT a risk expression?

• Risk sources

• Potential events

• Consequences

• Vulnerabilities

Multiple Choice

Which is NOT a security risk situation?

• Implementing new technology

• Dissatisfied customer raging on social media

• Employee firing a gun

• Selangor flooding

Multiple Choice

Risk have only bad consequences.

• True

• False

Multiple Choice

Crisis is also known as risk.

• True

• False

Multiple Choice

Organisational objectives dynamically change based on risk.

• True

• False

Match

Match the following risk triangle elements

• Something that could harm organisation such as theft

• Threat level such as technology not connected to internet is less susceptible for hacking

• Consequence of threat such as reputational damage

Threat

Exposure

Impact

• Threat

• Exposure

• Impact

Multiple Choice

Thought of risk is when there is only some elements of risk triangle.

• True

• False

Match

Match the following

• Ringgit's value dropped since 1MDB scandal

• Selangor flooding

• Palestine-Israel conflict

• Rohingya refugees in Malaysia

• Increase of cyber scams

Economic

Environmental

Geopolitical

Societal

Technological

• Economic

• Environmental

• Geopolitical

• Societal

• Technological

Multiple Choice

Which is the biggest global risk?

• Extreme weather

• AI generate misinformation

• Societal polarization

• Cost of living crisis

Reorder

Reorder the following ESRM lifecycle

• Identify asset

• Identify risk

• Mitigate risk

• Improve

1

2

3

4

• 1
• 2
• 3
• 4

Multiple Choice

ESRM is a security convergence.

• True

• False

Multiple Choice

ESRM only focuses on physical security.

• True

• False

Multiple Choice

ESRM manages all company risk.

• True

• False

Multiple Choice

ESRM is a component of Enterprise Risk Management.

• True

• False

Match

Match the following

• Organisational member most responsible for asset operation. E.g. Building owner leasing.

• Security leaders involved in security risk management. E.g. Personnel conducting Physical Security Risk Assessment.

• Person with interest. E.g. Employees, investors and customers.

• Person formulating goals and allocate resources. E.g. CEO buys safety equipment due to new policies.

Asset owner

Security professional

Stakeholder

Top management

• Asset owner

• Security professional

• Stakeholder

• Top management