While conducting an executive protection risk assessment, the executive protection specialist should focus on what two areas in order to rate the…

The process of rating risk in any security discipline, including executive protection, is fundamentally based on two factors: the likelihood of an adverse event and the potential impact (or consequence) of that event. "Threat likelihood" directly addresses the probability component. "Threat analysis" is the systematic evaluation of a threat's capabilities, intentions, and past activities to determine the potential severity and nature of an attack. This analysis directly informs the impact component of the risk equation. By combining the likelihood of a threat with a thorough analysis of its potential impact, a protection specialist can assign a rating (e.g., low, medium, high) to the risk.

A. Threat transfer and threat spreading are risk treatment strategies used to manage risk after it has been rated, not factors used to rate it.

B. Threat avoidance and threat mitigation are also methods of risk treatment or control, which are actions taken in response to a risk assessment.

D. Threat control is a risk management strategy, and "threat hazards" is a redundant term related to the identification phase, not the analysis or rating phase.

1. ASIS International. (2021). Protection of Assets (POA). Security Management volume

Chapter 2: Risk Management. This foundational text explains that risk analysis

a core part of risk assessment

involves developing an estimate of the likelihood and consequences of a risk event. This directly corresponds to analyzing threat likelihood and impact (derived from threat analysis).

2. ASIS International. (2019). ASIS/ANSI General Security Risk Assessment Guideline (GSRA). Section 5.3: Risk Analysis. The standard specifies that risk analysis involves considering the likelihood of a security incident and the severity of its consequences. "Threat analysis" is the method for determining the potential consequences of an intentional threat

while "threat likelihood" assesses the probability.

3. Fischer

R. J.

Halibozek

E.

& Walters

D. C. (2019). Introduction to Security (10th ed.). Butterworth-Heinemann. Chapter 4: The Role of Risk

Threat

and Vulnerability Assessments

pp. 78-80. This academic text defines risk as "the potential for loss resulting from a threat." It clarifies that measuring this risk requires assessing both the probability (likelihood) of the threat event and the severity of its impact (consequence)

which is determined through threat analysis.