A vulnerability assessment tour of a facility is designed to gather information regarding the general layout of the facility, the location of key assets, information about facility operations and production capabilities and locations and types of physical protection systems. During this tour and subsequent tours the vulnerability assessment member or team should be looking to:
A.
determining where all the fi re exits are located
B.
examining the locations of physical protection system components
C.
counting the number of employees within the facility
D.
determining the structural strength of the perimeter walls
Explanation:
B: The assessment of any vulnerability of a facility or building should be done within the context of the defined threats and the value of the organizations assets. That is, each element of the facility should be analyzed for vulnerabilities to each threat and a vulnerability rating should be assigned. A vulnerability assessment may change the value rating of assets due to the identification of critical nodes or some other factor that makes the organizations assets more valuable. Page 586.