The “vulnerability of a facility” to damage or attack may be assessed by all of the following EXCEPT:

A.
Inspection

B.
History of losses

C.
Security controls

D.
security budget

Explanation:
There are many types of tests that can be performed to assess the vulnerability of a facility. These include
inspection, history of losses and security controls.
Inspection covers many aspects of vulnerability testing ranging from checking the perimeter fencing to
penetration testing of systems.
History of losses (losses from previous attacks or security breaches) is a good way of assessing the
vulnerability of a facility. Examining how previous breaches occurred can help determine whether the facility is
protected against another similar breach.
Testing the security controls in place to ensure they are sufficient is an obvious way of assessing the
vulnerability of a facility. Security controls cover everything from the locks on the doors to intrusion detection
systems.
One thing that cannot be used to assess the vulnerability of a facility is the security budget. The amount of
money spent on security is irrelevant. A large security budget does not guarantee that a facility is secure and a
small budget does not mean it is insecure.
Incorrect Answers:
A: Inspection of the security systems can be used to assess the vulnerability of a facility. Therefore, this answeris incorrect.
B: History of losses (losses from previous attacks or security breaches) can be used to assess the vulnerability
of a facility. Therefore, this answer is incorrect.
C: Examining the security controls can be used to assess the vulnerability of a facility. Therefore, this answer is
incorrect.