Security Program Integration Professional Certification (SPIPC) questions with correct answers

What is the purpose of the asset assessment step of the risk management process? CORRECT ANSWER • Identify assets requiring protection and/or that are important to the organization and to national security • Identify undesirable events and expected impacts • Prioritize assets based on consequences of loss What is the purpose of the threat assessment step of the risk management process? CORRECT ANSWER • Determine threats to identified assets • Assess intent and capability of identified threats • Assess current threat level for the identified assets What is the purpose of the vulnerability assessment step of the risk management process? CORRECT ANSWER • Identify existing countermeasures and their level of effectiveness in reducing vulnerabilities • Identify potential vulnerabilities related to identified assets and their undesirable events • Identify current vulnerability level for the iden