LJ-2 Unit 8 Review (Risk & Threat Management)

The terms "threat" and "risk" can be used interchangeably; for example, a "threat assessment" is the same as a "risk assessment".

• true

• false

The concept of "risk management" originated within the security profession.

• true

• false

Because vulnerabilities are actually a characteristic of the organization or facility, they are:

• the risk factor over which the organization has the most control.

• impossible to accurately assess by an outside consultant.

• The risk factor that is most expensive to correct.

• the only risk factor that can be influenced by the organization.

According to "Primer on Security Risk Management", which is NOT one of the primary categories of threats?

• criminal

• intentional

• inadvertent

• natural

In a scatter chart used for risk analysis, which quadrant represents a "high-likelihood/high-consequence" risk?

• 1

• 2

• 3

• 4

In order to effectively mitigate risks, a security professional should:

• limit their strategy to using proven security measures only

• assess all possible threats to the organization.

• apply a protection strategy that employs a suite of solutions.

• ensure that management is aware of existing vulnerabilities.

Buying insurance is one example of:

• risk spreading.

• risk transfer.

• risk avoidance.

• risk reduction.

Which one of the following is not one of the underlying concepts on which a risk mitigation strategy should be based?

• the five avenues to address risk

• the four D's

• layered security

• quantitative analysis

Risk management is a critical process that touches every aspect of organizational asset protection -- and the activities of the professional protection officer.

• true

• false

Service providers should not base their core business model on risk management principles.

• true

• false