Print Study Guide Flashcards by Kathryn McNeal

5 forces that shape assets protection

Technology and touch
Convergence of security solutions
Globalization in business
The international security environment
Standards and regulations

How well did you know this?

Not at all

Perfectly

Unity of command

Should only report to one person

How well did you know this?

Not at all

Perfectly

5 categories of distinction between public and private policing

Philosophical
Legal
Financial
Operational
Security/political

How well did you know this?

Not at all

Perfectly

Is accumulated depreciation an asset or liability

Asset

How well did you know this?

Not at all

Perfectly

What is gross profit margin based on

Sales and cost of goods sold (efficiency of producing product)

How well did you know this?

Not at all

Perfectly

What is operating margin based on

EBITA

How well did you know this?

Not at all

Perfectly

What is the quick ratio

Aka acid test, aka cash ratio (easily converted to cash)

How well did you know this?

Not at all

Perfectly

What is WAECUP?

Waste, accidents, error, crime, unethical practices

Used as blueprint for developing security objectives

How well did you know this?

Not at all

Perfectly

What is the STEP model

Social, technological, environmental, and political

Potential sources of threats

How well did you know this?

Not at all

Perfectly

What is a corrective report

Alerts units with unacceptable incident records

How well did you know this?

Not at all

Perfectly

What is a misconduct investigation?

Employee or affiliate violates policy or law

How well did you know this?

Not at all

Perfectly

What are compliance investigations for

Violations of law, lapses in business ethics, and concomitant legal sanctions

How well did you know this?

Not at all

Perfectly

Pygmalion effect

If you believe someone is capable of achieving greatness, they will

How well did you know this?

Not at all

Perfectly

What is “mens rea”

“guilty mind”, the state of mind or wrongful purpose required by criminal laws; must be acting intentionally (except negligence or strict liability crimes)

How well did you know this?

Not at all

Perfectly

What % of evidence is typically testimonial

80%

How well did you know this?

Not at all

Perfectly

Any building opening less than ___ feet above the ground should be secured

How well did you know this?

Not at all

Perfectly

A clear zone of ___ feet or more should separate the primer barrier from structures within the protected area

How well did you know this?

Not at all

Perfectly

What is the most common intrusion detector?

Passive infrared sensors

How well did you know this?

Not at all

Perfectly

Where should acoustic glass break sensors be placed

On the opposite wall

How well did you know this?

Not at all

Perfectly

What law prohibits the use of unlicensed microphones for purposes of eavesdropping?

The federal communications act

How well did you know this?

Not at all

Perfectly

Containers rated for fire and theft have a 1-2 hour fire rating and a TL rating of ___

How well did you know this?

Not at all

Perfectly

At a minimum, how often should lock combinations be changed?

Every 1-2 years

How well did you know this?

Not at all

Perfectly

What is the least secure frequency range because it contains fm bands

88-120

What is Angel dust the street name for

PCP

First responder vs emergency responder

Emergency responder could be staff

What is organization resilience management?

Systematic and coordinated activities and practices through which and organization manages its operational risks and the associated potential threats and impacts therein

This evaluates the presence of any specific concerns of violence affecting the workplace and the organizations readiness to respond to threats and violent incidents

Needs assessment

For workplace violence, these employees may be the first to be notified of an incident, a victim, or unsafe conditions.

Occupational safety and health personnel

An unstable condition involving an impending abrupt or significant change that requires urgent attention and action to protect life, assets, property, or the environment

Crisis

Serious, unexpected, and precarious situation requiring immediate action

Emergency

These prescription drugs are most subject to abuse in the workplace.

Stimulants and sedatives

Top two drugs abused in the workplace (in order)

Alcohol then marijuana

What is the layered security called in EP?

Rings of protection

The person under protection

The principal

The person paying for the security/protection

The client

Manages, designs, or manipulates the environment in a systematic way to increase the necessary effort and risk while reducing perceived rewards to the potential offender

Situational crime prevention

What is PAP

Physical asset protection

An event that causes significant damage to assets or loss of life

Disaster

Difference between IAP (information asset protection) vs ISS (information systems security)

IAP is holistic, ISS is digital

What is the AAA triad in confidentiality of information?

Authentication, authorization, and auditing

What is cyclical redundancy check

A tool for maintaining integrity of information which shows if data has been altered

What is the body of knowledge required for certification as an information system security professional

Critical information systems security professional (CISSP)

PCI DSS - PG 269

What are the two most prominent management system standards

ISO 9001 on quality management systems ISO 14001 on environmental management systems ISO 22301 on business continuity

What are the two most prominent management system standards

ISO 9001 on quality management systems ISO 14001 on environmental management systems

What are the five categories of distinction between public and private policing?

Philosophical Legal Financial Operational Security/political

What is ANSI?

American national standards institute

What are the two types of civil law?

Common (case) and statutory

What is GSA

General services administration

What comprises the CISSP body of knowledge (8 ISS domains)

Security and risk management Asset security Security engineering Communications and network security Identity and access management (IAM) security assessment and testing Security operations Software development security

What is the payment card industry data security standard (PCI DSS)

Standards to protect credit card data

What is the gramm-leach-bliley act

Regulates the use and disclosure of non-public personal information about individuals who obtain financial products or services from financial institutions

Sarbanes oxley act (SOX)

The most significant law since SEC; PLACES SUBSTANTIAL ADDITIONAL RESPONSIBILITIES ON OFFICERS AND DIRECTORS OF PUBLIC COMPANIES AND IMPOSES SIGNIFICANT CRIMINAL PENALTIES ON CEOS CFOS AND OTHERS WHO VIOLATE ITS PROVISIONS

What is the red flags rule?

Regulates financial institutions for early detection and prevention of theft; identify patterns, procedures to detect, respond, and update program regularly

Federal Trades commission (FTC) "safeguards rule"

Financial institutions must have comprehensive information security program

What is the general data protection regulation (GDPR)?

EU law on data protection and privacy; gives individuals control over their data

What is the EU-US privacy shield framework

Since US doesn't have adequate data protection, allows companies to be designated as having adequate protection.