Physical Risk Assessments Flashcards
For physical security planning what approach should be taken?
An all hazards approach.
What are the four steps for implementing a protective measure?
1) Select an option
2) Test
3) Implement
4) Train
What is a security survey?
A physical security risk assessment.
What is the difference between a security survey and a comprehensive risk assessment?
Security Surveys focus on vulnerabilities.
What are the 3 approaches to a security survey?
1) Outside-in (Considers measures from an attackers point of view)
2) Inside-out (Considers measures from a defenders point of view)
3) Functional (security Discipline approach)
What is the order of 5 disciplines used in the discipline approach to security surveys?
1) Security Architecture and Engineering
2) Structural security measures
3) CPTED
4) Electronics Security Systems
5) Security officers and the human element
What is the purpose of the security survey report? What 5 things should it be?
Provide the facts and persuade an organization to mitigate the identified vulnerabilities.
1) Clear
2) Concise
3) Accurate
4) Timely
5) Consider a slant or pitch
What are 4 things to test in a security survey?
1) Shipping and receiving controls
2) Intrusion detection and response to alarms
3) Computer lab/data room security measures
4) Testing access controls by training to gain unauthorized access during working and non-working hours.
What 3 components are within the enterprise network framework for measuring metrics?
1) Effectiveness
2) Efficiency
3) Strategic Improvement