Deck 7: Risk Assessment, Security Surveys, and Planning

Question 1

Risk can be defined as:

A) The possibility of suffering harm or loss.
B) Exposure to the probability of loss or damage.
C) An element of uncertainty.
D) The possibility that results of an action may not be consistent with planned outcomes.
E) All of the above.

Answer 1

All of the above.

Question 2

________ risk is unavoidable because of the nature of the business.

A) Pure
B) Dynamic
C) Speculative
D) Static
E) Inherent

Answer 2

Inherent

Question 3

________ risk exists when threat conditions fluctuate.

A) Pure
B) Dynamic
C) Speculative
D) Static
E) Inherent

Answer 3

Dynamic

Question 4

Materialized risk can:

A) Decrease the cost of doing business.
B) Decrease insurance premiums.
C) Create criminal liability.
D) Limit civil liability.
E) All of the above.

Question 5

A comprehensive risk management program involves:

A) An identification of risks but not vulnerabilities.
B) Periodic threat assessment.
C) Total elimination of all risk factors.
D) Optimization of cost-effective risk management alternatives.
E) All of the above.

Question 6

________ focuses on an individual's or organization's exposure to the possibility that a risk or threat will materialize.

A) Vulnerability
B) Probability
C) Criticality
D) Potentiality
E) All of the above.

Question 7

Objective risk assessment measures include:

A) Audits and marketing.
B) Operations research.
C) Incident and statistical reports.
D) Investigations and security surveys.
E) All of the above.

Question 8

Ideally, a security survey should address:

A) The environment surrounding a facility.
B) The immediate perimeter of a facility as well as any buildings within the perimeter.
C) Restricted areas and organizational policies and procedures.
D) Security personnel and employee security training.
E) All of the above.

Question 9

A ________ statement involves the articulation of an image for a better future.

A) Vision
B) Mission
C) Value
D) Planning
E) All of the above.

Question 10

________ plans are implemented each time a given situation or incident occurs.

A) Single-use
B) Standing
C) Tactical
D) Strategic
E) All of the above.

Question 11

________ is used to track incident and crime trends.

A) CPTED
B) Action plan selection
C) Cost-benefit analysis
D) Compstat
E) All of the above.

Question 12

________ budgets include measurable units tied to objectives that allow for a cost-benefit analysis by program type.

A) Traditional
B) Line item
C) Performance-based
D) Zero-based
E) All of the above.

Question 13

Within a budget, items such as utilities, contract services, training, and pre-employment screening would be included in the ________ category.

A) Personnel services
B) Operating expenses
C) Capital expenditures
D) Supplies and materials
E) Miscellaneous

Question 14

Crime Prevention Through Environmental Design can:

A) Prevent crime.
B) Reduce the number of opportunities to commit crime.
C) Provide freedom from interference.
D) Compliment a loss prevention program.
E) All of the above.

Question 15

________ refers to net savings that result when security measures are in place.

A) CompStat.
B) Budgeting.
C) Return on investment.
D) Value-added contribution.
E) All of the above.

Question 16

Externally, a risk management program utilizes ______ to protect assets against threats and hazards.

A) Administrative controls
B) Physical and personnel security
C) Society and its legal system
D) Information security
E) All of the above.

Question 17

A cost-benefit analysis is used to:

A) Determine the value of benefits derived from an expenditure.
B) Compare the value of benefits to costs.
C) Identify all possible consequences of an expenditure.
D) Calculate ROI and VAC.
E) All of the above.

Question 18

A ________ plan is designed to ensure that normal operations are not disrupted by major events.

A) Tactical
B) Business continuity
C) Environmental design
D) Single-use
E) All of the above.

Question 19

The ________ is a state-based emergency services plan.

A) National Incident Management System (NIMS)
B) National Response Plan (NRP)
C) Standardized Emergency Management System (SEMS)
D) State Emergency Plan (SEP)
E) All of the above.

Question 20

Disaster and emergency planning are: ________.

A) Totally a FEMA responsibility.
B) Should be left to local government.
C) A state responsibility only.
D) Everyone's job.
E) All of the above are correct.

Question 21

Risk can be totally eliminated through the development and implementation of a comprehensive risk management program.

Question 22

The three factors that influence risk management decisions are vulnerability, probability, and likelihood of occurrence.

Question 23

Medium probability risks may be disregarded by the security professional because the cost of protective measures often outweigh the benefits.

Question 24

Subjective risk assessment measures include the use of forecasting, expert opinion, and the Delphi technique.

Question 25

A security survey should focus only on property within an organization's sphere of control.

Question 26

Only objective measurements should be used for security surveys.

Question 27

All planning processes include at least three common elements: needs or risk assessment, action plan selection, and evaluation.

Question 28

A budget is a plan expressed in financial terms and is an essential ingredient to action plan development.

Question 29

The budget process should be rigid and inflexible so cost overruns are avoided.

Question 30

As part of the planning process, security managers should involve all stakeholders in the decision-making process.

Question 31

The conceptual thrust of Crime Prevention Through Environmental Design (CPTED) is that an environment can be manipulated to produce desirable behavioral effects.

Question 32

CPTED can be used as a substitute for an organizational security program.

Question 33

How is an asset evaluated to determine its vulnerability, probability, and criticality of loss?

Question 34

How many courses of action should be developed to eliminate, reduce, or mitigate risk?