SECURITY PROGRAM INTEGRATION PROFESSIONAL
CERTIFICATION (SPIPC) QUESTIONS
What is the purpose of the asset assessment
step of the risk management process? - ANSWERS-• Identify
assets requiring protection and/or that are important to the
organization and to national security
• Identify undesirable events and expected impacts
• Prioritize assets based on consequences of loss
What is the purpose of the threat assessment
step of the risk management process? - ANSWERS-• Determine
threats to identified assets
• Assess intent and capability of identified threats
• Assess current threat level for the identified assets
What is the purpose of the vulnerability
assessment step of the risk management
process? - ANSWERS-• Identify existing countermeasures and
their level of effectiveness in reducing vulnerabilities
• Identify potential vulnerabilities related to identified assets and
their undesirable events
• Identify current vulnerability level for the identified assets that
can be exploited by the identified threats
What is the purpose of the risk assessment step of the risk
management process? - ANSWERS-• Integrate information about
the impact of undesirable events (collected during the asset
assessment step) and the likelihood of undesirable events (based
on information collected during the threat and vulnerability
