Security Program Integration Professional Certification (SPIPC) | LATEST 2024/25

What is the purpose of the asset assessment step of the risk management process? - • Identify assets requiring protection and/or that are important to the organization and to national security • Identify undesirable events and expected impacts • Prioritize assets based on consequences of loss What is the purpose of the threat assessment step of the risk management process? - • Determine threats to identified assets • Assess intent and capability of identified threats • Assess current threat level for the identified assets What is the purpose of the vulnerability assessment step of the risk management process? - • Identify existing countermeasures and their level of effectiveness in reducing vulnerabilities • Identify potential vulnerabilities related to identified assets and their undesirable events • Identify current vulnerability level for the identified assets that can be exploited by the identified threats