PAP management is not always based on predictable threats and quantifiable risks. True or false?

PAP management is not always based on predictable threats and quantifiable risks. True or false?

• A. False
• B. True
• C. Sometimes
• D. Not Necessarily

Answer: (B)

PAP management is built to handle uncertainty. Not all threats can be predicted, and not all risks can be quantified with precision. A strong physical asset protection program blends quantitative data with qualitative judgment, uses scenario planning, and emphasizes layered defenses, detection, response, and recovery. This approach prepares for surprises and evolving threats as well as known risks, rather than relying only on predictable threats and numbers. So the statement is true. Treating it as always based on predictable threats would ignore uncertainty, while options like sometimes or not necessarily don’t capture the definitive stance the practice takes.

PAP management is built to handle uncertainty. Not all threats can be predicted, and not all risks can be quantified with precision. A strong physical asset protection program blends quantitative data with qualitative judgment, uses scenario planning, and emphasizes layered defenses, detection, response, and recovery. This approach prepares for surprises and evolving threats as well as known risks, rather than relying only on predictable threats and numbers. So the statement is true. Treating it as always based on predictable threats would ignore uncertainty, while options like sometimes or not necessarily don’t capture the definitive stance the practice takes.