CPP (ASIS) flashcards
CPP · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Risk assessment formula
- Risk is commonly expressed as the product of threat, vulnerability, and consequence; likelihood and impact estimates help prioritize countermeasures.
- CPTED four principles
- Crime Prevention Through Environmental Design uses natural surveillance, natural access control, territorial reinforcement, and maintenance to reduce opportunity for crime.
- Defense in depth
- A layered security strategy uses multiple independent controls so that failure of one control does not compromise the protected asset.
- Due diligence standard
- Security professionals must exercise reasonable care proportionate to foreseeable risk; failure to meet that standard can establish negligence liability.
- Three lines of defense
- Operational management owns risk, risk and compliance functions monitor it, and internal audit provides independent assurance over the control environment.
- Annualized loss expectancy
- ALE equals single loss expectancy multiplied by annualized rate of occurrence; it estimates expected yearly loss from a specific threat.
- Single loss expectancy
- SLE equals asset value multiplied by exposure factor, representing the loss from one incident affecting that asset.
- Return on investment
- ROI compares net benefit to cost, usually expressed as a percentage; security proposals should show loss reduction or risk reduction against cost.
- RFP versus RFQ
- A request for proposal seeks detailed solutions and pricing for complex needs; a request for quotation seeks price for well-defined goods or services.
- Service level agreement
- An SLA defines measurable service expectations, responsibilities, remedies, and reporting between a security provider and the client organization.
- Chain of custody
- A documented, continuous record of who handled evidence, when, where, and why, preserving its integrity for legal or administrative proceedings.
- Garrity protection
- Statements compelled from public employees under threat of discipline generally cannot be used against them in later criminal proceedings.
- Weingarten rights
- Unionized employees may request union representation during an investigatory interview that they reasonably believe could lead to discipline.
- Fraud triangle
- Fraud risk increases when opportunity, pressure, and rationalization coincide; controls target opportunity while awareness programs address pressure and rationalization.
- Best evidence rule
- Courts generally require the original document or recording to prove its contents, unless a reliable explanation for its absence is provided.
- Pre-employment screening
- Verification of identity, employment history, education, credentials, and criminal background, conducted with consent and consistent with applicable law.
- Least privilege
- Users receive only the access needed for their assigned tasks, reducing the impact of compromised accounts and insider misuse.
- Insider threat program
- A program that combines policy, awareness, monitoring, reporting, and investigation to detect and respond to harmful insider activity.
- Offboarding access removal
- Terminated or transferred personnel must have badges, accounts, keys, and remote access revoked promptly according to a documented checklist.
- Fail-safe versus fail-secure
- Fail-safe locks release during power loss to protect life safety; fail-secure locks remain locked to protect assets, subject to code requirements.
- Two-factor authentication
- Access requires two different credential types, such as a badge and a PIN or biometric, from knowledge, possession, or inherence categories.
- Perimeter security layers
- Physical security uses outer perimeter, building envelope, interior zones, and restricted areas to deter, detect, delay, and respond to intrusion.
- Visitor management
- A process that verifies identity, records entry and exit, issues badges, and escorts or restricts visitors according to site policy.
- Alarm false alarm causes
- Common causes include user error, environmental conditions, improper sensor placement, and lack of maintenance; reduction requires design, training, and verification.
- CIA triad
- Confidentiality protects unauthorized disclosure, integrity protects unauthorized alteration, and availability ensures timely and reliable access to information.
- Role-based access control
- RBAC assigns permissions to job roles rather than individuals, simplifying administration and supporting least privilege and separation of duties.
- Incident response lifecycle
- Preparation, detection and analysis, containment, eradication, recovery, and lessons learned structure the response to security incidents.
- Data classification
- Labeling information by sensitivity and value determines handling, storage, transmission, retention, and destruction requirements.
- Recovery time objective
- The RTO is the maximum acceptable time to restore a business function or system after disruption, guiding continuity and recovery planning.
- Recovery point objective
- The RPO is the maximum acceptable data loss measured in time before a disruption, determining backup frequency and replication design.
- Business impact analysis
- A BIA identifies critical functions, dependencies, and disruption impacts, and sets recovery priorities, RTOs, and RPOs.
- After-action review
- A structured debrief after an incident or exercise identifies strengths, gaps, and corrective actions with owners and deadlines.