PSP flashcards
PSP · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Design basis threat
- The adversary capability, intent, tactics, and weapons that a protection system is designed to counter; it anchors assessment and design decisions.
- CARVER matrix
- A prioritization method scoring assets on criticality, accessibility, recoverability, vulnerability, effect, and recognizability to compare relative attractiveness and impact.
- Risk formula
- In qualitative security assessment, risk is estimated from threat, vulnerability, and consequence; higher values in any factor increase overall risk.
- Asset inventory
- A structured list of people, information, equipment, facilities, and processes requiring protection, with criticality, location, and ownership recorded.
- Vulnerability
- A weakness or gap in protection, procedures, or design that an adversary can exploit to achieve an undesired outcome.
- CPTED natural surveillance
- Designing sightlines, lighting, and activity placement so people can observe spaces, increasing the chance of detection and deterrence.
- Gap analysis
- Comparison of required protection derived from the design basis threat against existing controls, identifying deficiencies and possible mitigations.
- Residual risk
- The risk remaining after countermeasures are applied; it must be documented and accepted by an authorized risk owner.
- Layered defense
- Multiple independent barriers and detection zones from perimeter to asset, so defeat of one layer does not immediately expose the protected asset.
- Delay and response
- Effective interdiction requires response time plus detection and assessment time to be less than the delay provided by physical barriers.
- Perimeter intrusion detection
- Sensors such as fence-mounted, buried, microwave, infrared, or video analytics that detect movement or breach at the site boundary.
- Access control factors
- Authentication relies on something you know, something you have, or something you are; combining factors increases assurance.
- False accept rate
- The probability a biometric system incorrectly matches an unauthorized person; lowering it usually raises the false reject rate.
- CCTV pixel density
- Pixels per unit length on a target determine whether video supports detection, recognition, or identification; more pixels support higher discrimination.
- Alarm assessment
- Verification of an alarm with video, guards, or sensors before dispatch, reducing false responses and improving responder prioritization.
- Vehicle barrier rating
- Crash-rated barriers are selected by test standard, vehicle class, speed, and penetration; ratings must match the assessed vehicle threat.
- Commissioning
- The process of verifying that installed systems and components meet design intent and operational requirements before formal acceptance and handover.
- Factory acceptance test
- A structured test performed at the manufacturer's facility before shipment to confirm specified functions, interfaces, and performance.
- Site acceptance test
- Testing after installation to verify the integrated system performs as specified in its actual operating environment.
- As-built documentation
- Final drawings, cable schedules, configurations, and manuals updated to reflect installed conditions; they support maintenance, troubleshooting, and future changes.
- Cyber-physical security
- Physical security devices connected to networks require segmentation, patching, least privilege, and monitoring because compromise can disable protection.
- UPS runtime
- Backup time depends on connected load and battery capacity; critical head-end and devices should be sized for required outage duration.
- Change management
- Controlled review and documentation of changes to design, configuration, firmware, and procedures to prevent unintended protection gaps.
- Substantial completion
- The stage when the work is sufficiently complete for its intended use, often triggering punch list, training, and warranty provisions.
- Request for information
- A procurement document used to gather vendor capabilities, market options, and pricing approaches before defining a formal solicitation.
- Statement of work
- A contract document defining scope, deliverables, schedule, acceptance criteria, responsibilities, assumptions, and exclusions for the supplier.
- Best value evaluation
- Award based on weighted technical and price factors rather than lowest price, used when performance and lifecycle cost matter.
- Total cost of ownership
- All costs over the system life, including acquisition, installation, licensing, maintenance, training, upgrades, replacement, and disposal.
- Firm-fixed-price contract
- A contract with a fixed price for a well-defined scope; the seller bears cost overruns unless changes are authorized.
- Service level agreement
- A contract schedule defining uptime, response and repair times, reporting, escalation, remedies, and responsibilities for ongoing services.
- Performance specification
- A procurement specification stating required outcomes and measurable performance rather than prescribing exact products or methods.
- Vendor qualification
- Review of licenses, insurance, bonding, financial stability, past performance, references, and certifications before contract award.