A vulnerability assessment tour of a facility is designed to gather information regarding the general layout of the facility, the location of key assets, information about facility operations and production capabilities and locations and types of physical protection systems. During this tour and subsequent tours the vulnerability assessment member or team should be looking to:
A.
determining where all the fi re exits are located
B.
examining the locations of physical protection system components
C.
counting the number of employees within the facility
D.
determining the structural strength of the perimeter walls
Explanation:
B: The assessment of any vulnerability of a facility or building should be done within the context of the defined threats and the value of the organizations assets. That is, each element of the facility should be analyzed for vulnerabilities to each threat and a vulnerability rating should be assigned. A vulnerability assessment may change the value rating of assets due to the identification of critical nodes or some other factor that makes the organizations assets more valuable. Page 586.
The assessment of any vulnerability of a facility or building should be done within the context of the defined threats and the value of the organizations assets. That is, each element of the facility should be analyzed for vulnerabilities to each threat and a vulnerability rating should be assigned. A vulnerability assessment may change the value rating of assets due to the identification of critical nodes or some other factor that makes the organizations assets more valuable.
設施或建築物的任何脆弱性的評估應該定義威脅的上下文中和各組織的資產價值內進行。也就是說，該設施中的每個元素進行分析的漏洞的每個威脅和弱點評級應該分配。漏洞評估可能的資產價值等級更改由於關鍵節點的標識或使組織資產更有價值一些其他的因素。
0
0