Access Control - Answers control of persons, vehicles and materials through the implementation of
security measures for a protected area
Alarm System - Answers Combination of sensors, controls and annunciators arranged to detect and
report an intrusion or other emergency.
Asset - Answers anything that has tangible or intangible value to an enterprise
Assets (Intangible) - Answers Assets that do not have a physical presence, including information,
intellectual property, credibility and reputation, and brand identity.
Asset Owner - Answers Member of an enterprise who is most accountable and responsible for the
productivity, performance, and overall operation of an asset.
Assets (Tangible) - Answers Assets that have a physical presence, including human and environmental
assets.
Auditor - Answers person with the personal attributes and competence to conduct an audit
Barrier - Answers natural or man-made obstacle to the movement/direction of persons, animals,
vehicles or materials
Camera - Answers device for capturing visual images, whether still or moving; in security, part of a video
surveillance system
Consequence - Answers result or effect of an action, condition, or decision on achieving objectives and
outcomes
Continuous Improvement - Answers recurring process of enhancing a process or program in order to
achieve improvements in overall performance consistent with the organization's policy
Continuity - Answers strategic and tactical capability, pre-approved by management, of an organization
to plan for and respond to conditions, situations, and events in order to continue operations at an
acceptable defined level
Contract Security - Answers A business that provides security services, typically the services of security
officers, to another entity for compensation.
Crime Prevention Through Environmental Design (CPTED) - Answers approach to reducing crime or
security incidents through the strategic design of the built environment typically employing
organization, mechanical and natural methods to control access, enhance natural surveillance,
territoriality, and support legitimate activity
Crisis - Answers an unstable condition involving an impending abrupt or significant change that requires
urgent attention and action to protect life, assets, property, or the environment
, Criticality Analysis - Answers a process designed to systematically identify and evaluate an organization's
assets based on the importance of its mission or function.
Detection - Answers act of identifying an impending or actual security breach
Disruption - Answers intentional, unintentional, or natural event that interrupts normal business,
functions, operations, or processes, whether anticipated or not
Due Diligence - Answers care that a prudent person might be expected to exercise in the examination
and evaluation of risks
Duty of Care - Answers responsibility of a person or organization to take all reasonable measures
necessary to prevent activities that could result in harm to other individuals and/or their property
Enterprise Security Risk Management (ESRM) - Answers strategic approach to security management that
ties an organization's security practice to its mission and goals using globally established and accepted
risk management principles
Event - Answers change occurring in an interval of time with potential to alter outcomes
Exercises - Answers evaluating management programs, rehearsing the roles of team members and staff,
and testing the recovery or continuity of an organization's systems to demonstrate management
competence and capability
External Context - Answers external environment in which the organization seeks to achieve its
objectives
Facility (Infrastructure) - Answers Plant, machinery, equipment, property, buildings, vehicles,
information systems, transportation facilities, and other items of infrastructure or plant related systems
that have a distinct and quantifiable function or service.
Hazard - Answers possible source of danger or conditions (physical or operational) that have a capacity
to produce a particular type of adverse effect
Impact - Answers evaluated consequence of a particular event
Incident - Answers event with consequences that have the capacity to cause gains or losses/harm to
objectives and/or assets of the enterprise
Internal Audit - Answers systematic, independent, and documented process for obtaining audit evidence
and evaluating it objective to determine the extent to which the management system audit criteria set
by the organization are fulfilled
Internal Context - Answers internal environment in which the organization seeks to achieve its
objectives