CPP (D1 Security Principles and Practices)
EXAM REVIEW QUESTIONS CORRECTLY
ANSWERED 100% VERIFIED.
What six things should be considered when assessing consequences?
Human cost,
Financial cost,
Image cost,
Human rights impacts,
Indirect impacts,
Environmental impacts
What changes may prompt an update to a risk assessment ?
Changes in:
Risk landscape,
Leadership and partnerships,
Contractual and industry trends,
Regulatory requirements,
Political environment,
Conditions due to an event,
Performance based test / exercise results
What are five benefits of liaison ?
Leverage the resources of others,
Share best practices and lessons learned,
Collaborate on specific cases or incidents,
More effectively address common issues,
Share information, equipment, and facilities
What is cost-effectiveness ?
Producing good results for the money spent
What three things maximize cost-effectiveness ?
Ensure that the operations are conducted in the least expensive but cost effective
way,
, Maintain the lowest costs consistent with required operational results,
Ensure that the amount of money spent generates the highest return
What is security awareness ?
Consciousness of an existing security program, its relevance, and the effect of one's
behavior on reducing security risks
What is the purpose of a security awareness program ?
To communicate to all individuals, including those working on behalf of the
organization, risks within the organization's unique internal and external
environments, and the technical and administrative controls implemented to
effectively manage those risks
When is an effective security culture established ?
When people's behaviors align with the defined risk management processes and
where the security technologies and methods deployed are policy based and well
communicated through security awareness and training activities
What is the goal of a security awareness program ?
To promote compliance with security policies and procedures, as well as provide
timely communications and training to guide individual and organizational attitudes
and behaviors
What should every awareness program be structured to reflect ?
The organization's unique culture, risk environment, lifecycle management, and
change control process
How does clear top management support for security awareness set the tone ?
By actively supporting awareness communication, training, and associated activities.
Top management should also be involved in strengthening the culture that ensures
individuals understand their security roles and take ownership of their personal
safety and security
What three program principles should be established for security awareness
programs ?
Encourage enterprisewide ownership,
Develop a unified approach for security awareness communication and training,
Leverage existing programs / infrastructure
EXAM REVIEW QUESTIONS CORRECTLY
ANSWERED 100% VERIFIED.
What six things should be considered when assessing consequences?
Human cost,
Financial cost,
Image cost,
Human rights impacts,
Indirect impacts,
Environmental impacts
What changes may prompt an update to a risk assessment ?
Changes in:
Risk landscape,
Leadership and partnerships,
Contractual and industry trends,
Regulatory requirements,
Political environment,
Conditions due to an event,
Performance based test / exercise results
What are five benefits of liaison ?
Leverage the resources of others,
Share best practices and lessons learned,
Collaborate on specific cases or incidents,
More effectively address common issues,
Share information, equipment, and facilities
What is cost-effectiveness ?
Producing good results for the money spent
What three things maximize cost-effectiveness ?
Ensure that the operations are conducted in the least expensive but cost effective
way,
, Maintain the lowest costs consistent with required operational results,
Ensure that the amount of money spent generates the highest return
What is security awareness ?
Consciousness of an existing security program, its relevance, and the effect of one's
behavior on reducing security risks
What is the purpose of a security awareness program ?
To communicate to all individuals, including those working on behalf of the
organization, risks within the organization's unique internal and external
environments, and the technical and administrative controls implemented to
effectively manage those risks
When is an effective security culture established ?
When people's behaviors align with the defined risk management processes and
where the security technologies and methods deployed are policy based and well
communicated through security awareness and training activities
What is the goal of a security awareness program ?
To promote compliance with security policies and procedures, as well as provide
timely communications and training to guide individual and organizational attitudes
and behaviors
What should every awareness program be structured to reflect ?
The organization's unique culture, risk environment, lifecycle management, and
change control process
How does clear top management support for security awareness set the tone ?
By actively supporting awareness communication, training, and associated activities.
Top management should also be involved in strengthening the culture that ensures
individuals understand their security roles and take ownership of their personal
safety and security
What three program principles should be established for security awareness
programs ?
Encourage enterprisewide ownership,
Develop a unified approach for security awareness communication and training,
Leverage existing programs / infrastructure
