Docsity
Docsity
Prepare for your exams
Prepare for your exams

Study with the several resources on Docsity

Earn points to download
Earn points to download

Earn points by helping other students or get them with a premium plan

Guidelines and tips
Guidelines and tips
Sell on Docsity
Sell on Docsity
Docsity AI
Docsity AI
Log inSign up

Prepare for your exams

Study with the several resources on Docsity

Find documents

Prepare for your exams with the study notes shared by other students like you on Docsity

Search for your university

Find the specific documents for your university's exams

Docsity AINEW

Summarize your documents, ask them questions, convert them into quizzes and concept maps

Explore questions

Clear up your doubts by reading the answers to questions asked by your fellow students

Earn points to download

Earn points by helping other students or get them with a premium plan

Share documents
download point icon20 Points

For each uploaded document

Answer questions
download point icon5 Points

For each given answer (max 1 per day)

All the ways to get free points
Get points immediately

Choose a premium plan with all the points you need

Study Opportunities

Choose your next study program

Get in touch with the best universities in the world. Search through thousands of universities and official partners

Community

Ask the community

Ask the community for help and clear up your study doubts

Free resources

Our save-the-student-ebooks!

Download our free guides on studying techniques, anxiety management strategies, and thesis advice from Docsity tutors

Security Program Integration Professional Certification (SPIPC), Exams of Information Integration

A.T. Still University of Health Sciences (ATSU)Information Integration

Security Program Integration Professional Certification (SPIPC)

Typology: Exams

2022/2023

Available from 05/20/2023

expertee
expertee ๐Ÿ‡บ๐Ÿ‡ธ

3.8

(44)

4.4K documents

1 / 5

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Security Program Integration Professional Certification (SPIPC)
What is the purpose of the asset assessment
step of the risk management process? - โœ…โœ…โœ…โ€ข Identify assets requiring protection and/or that
are important to the organization and to national security
โ€ข Identify undesirable events and expected impacts
โ€ข Prioritize assets based on consequences of loss
What is the purpose of the threat assessment
step of the risk management process? - โœ…โœ…โœ…โ€ข Determine threats to identified assets
โ€ข Assess intent and capability of identified threats
โ€ข Assess current threat level for the identified assets
What is the purpose of the vulnerability
assessment step of the risk management
process? - โœ…โœ…โœ…โ€ข Identify existing countermeasures and their level of effectiveness in reducing
vulnerabilities
โ€ข Identify potential vulnerabilities related to identified assets and their undesirable events
โ€ข Identify current vulnerability level for the identified assets that can be exploited by the
identified threats
What is the purpose of the risk assessment step of the risk management process? - โœ…โœ…โœ…โ€ข
Integrate information about the impact of undesirable events (collected during the asset
assessment step) and the likelihood of undesirable events (based on information collected
during the threat and vulnerability assessment steps) to determine risks to identified assets
What is the purpose of the countermeasure determination step of the risk management
process? - โœ…โœ…โœ…โ€ข Identify potential countermeasures to reduce vulnerability and/or threat
and/or impact
โ€ข Identify countermeasure benefits in terms of risk reduction
โ€ข Identify countermeasure costs
pf3
pf4
pf5

Partial preview of the text

Download Security Program Integration Professional Certification (SPIPC) and more Exams Information Integration in PDF only on Docsity!

Security Program Integration Professional Certification (SPIPC)

What is the purpose of the asset assessment step of the risk management process? - โœ…โœ…โœ…โ€ข Identify assets requiring protection and/or that are important to the organization and to national security

  • Identify undesirable events and expected impacts
  • Prioritize assets based on consequences of loss What is the purpose of the threat assessment step of the risk management process? - โœ…โœ…โœ…โ€ข Determine threats to identified assets
  • Assess intent and capability of identified threats
  • Assess current threat level for the identified assets What is the purpose of the vulnerability assessment step of the risk management process? - โœ…โœ…โœ…โ€ข Identify existing countermeasures and their level of effectiveness in reducing vulnerabilities
  • Identify potential vulnerabilities related to identified assets and their undesirable events
  • Identify current vulnerability level for the identified assets that can be exploited by the identified threats What is the purpose of the risk assessment step of the risk management process? - โœ…โœ…โœ…โ€ข Integrate information about the impact of undesirable events (collected during the asset assessment step) and the likelihood of undesirable events (based on information collected during the threat and vulnerability assessment steps) to determine risks to identified assets What is the purpose of the countermeasure determination step of the risk management process? - โœ…โœ…โœ…โ€ข Identify potential countermeasures to reduce vulnerability and/or threat and/or impact
  • Identify countermeasure benefits in terms of risk reduction
  • Identify countermeasure costs
  • Conduct cost/benefit analysis
  • Prioritize options and prepare recommendation for decision maker What is the primary benefit of conducting the risk management process? - โœ…โœ…โœ…โ€ข National-level security policy endorses a holistic risk management approach, allowing decision makers to effectively allocate resources that provide the necessary security to assets that match the threat to those assets What are the primary costs of conducting the risk management process? - โœ…โœ…โœ…โ€ข Time and effort necessary to execute the five steps of the risk management process What are the potential challenges security practitioners may face when enacting the risk management process? - โœ…โœ…โœ…โ€ข Availability of information necessary to accurately determine the likelihood and impact of undesirable events Where can we get information to evaluate an organization's compliance with security policies? - โœ…โœ…โœ…โ€ข Self-inspections Where can we get information to evaluate the effectiveness of an organization's security program? - โœ…โœ…โœ…โ€ข Incident reports
  • Regressive analysis
  • SME interviews (individuals involved in protecting Classified Military Information (CMI))
  • Security planning documents
  • Surveys and audits
  • Information Systems (IS) Certification and Accreditation documentation
  • Facility certification and accreditation documentation Given the incident, what is an example of an organization complying with security policy, but the measure(s) it implemented appear to be ineffective? - โœ…โœ…โœ…โ€ข The appropriate signage and notices are posted in appropriate areas, but are potentially ineffective considering a history of uncleared personnel gaining access to restricted areas.

What are the major outcomes of the Budgeting stage of the PPB&E process? - โœ…โœ…โœ…โ€ข Budgeting happens at the same time as programming.

  • Each DoD department and agency submits a budget estimate along with its POM.
  • Each DoD department and agency also translates its budget estimate for the next two years into the Congressional appropriation structure format, and then submits it.
  • Under Secretary of Defense (Comptroller) and Office of Management and Budget (OMB) analysts review the submissions to ensure program funding matches current policy, they are priced right, and are justified to Congress.
  • Budget review hearings are conducted to address analysts' questions.
  • After budget review hearings, each analyst then prepares a Program Budget Decision (PBD) for each program that proposes financial adjustments to address issues or problems identified during the hearing.
  • The PBD then goes to SECDEF for a decision. The decision goes in an updated budget submission to OMB.
  • Finally, the overall DoD budget is provided as part of the President's Budget request to Congress. What are the major outcomes of the Execution stage of the PPB&E process? - โœ…โœ…โœ…โ€ข The execution review occurs at the same time as the program and budget reviews.
  • The review provides feedback to OSD about the effectiveness of the budget.
  • Program metrics developed throughout the process are used to measure actual output versus expected performance. If the program misses its metrics, then the execution review may lead to recommendations to adjust the budget or program so it does make those goals. What is the relationship between the PPB&E process, the President's budget submission to Congress, and Congress's Appropriations process? - โœ…โœ…โœ…โ€ข The Department submits a two-year โ€ข The Department submits a two-year budget estimate to OMB that becomes part of the President's budget request to Congress for even-numbered fiscal years (e.g., the President's Budget submitted to Congress in March 2015 contained the Department's budget estimates and justification for FY 2016 and FY 2017).
  • In practice, Congress does not actually provide the Department with a two-year appropriation. It only appropriates funds for the first year. An amended budget justification must be submitted

for the second year of the original two-year request so Congress will appropriate funds for that second year. What roles do the Quadrennial Defense Review (QDR), POM, and Future Years Defense Program (FYDP) play in the PPB&E process? - โœ…โœ…โœ…โ€ข The QDR is a legislatively-mandated review of DoD strategy and priorities. It sets the long-term course for the DoD by assessing threats and challenges the nation faces and rebalancing DoD's strategies, capabilities, and forces to address today's conflicts and tomorrow's threats. The QDR serves as input to the development of the DPG during the PPB&E planning phase.

  • The POM allows each DoD department and agency to describe, in detail, its proposed budget for the next six years. It serves as input to the Department's overall budget request, provided to Congress as part of the President's budget request. The POM is one of the primary outcomes of the PPB&E programming phase.
  • The FYDP summarizes forces, resources, and equipment associated with DoD programs for six years (the current two budgeted years plus four additional years). It is updated twice during the PPB&E cycle: Once to reflect the services combined in the POM submission, and again to reflect the President's Budget submitted to Congress. Describe what occurs during the even 8. Describe what occurs during the even and odd years of the five-year PPB&E process. - โœ…โœ…โœ…โ€ข During "on years" (even FY), the Department submits a two- year budget estimate to OMB, which becomes part of the President's budget request to Congress.
  • During the "off years" (odd FY), the Department submits an amended budget justification for the second year of the original two-year request to Congress. How do you get information about resources necessary to implement the Area Commander's decision into the PPB&E process? - โœ…โœ…โœ…โ€ข Through the POM.