In airport security, risk management is best described as which process?

• A. The process to identify, assess, and mitigate security risks to people and assets.
• B. Installing fences and barriers around sensitive areas.
• C. Developing a budget for security equipment.
• D. Scheduling staff shifts and overtime.

Answer: (A)

The main idea is that risk management in airport security is a continuous, structured process of handling threats to people and assets by addressing three core activities: identifying what could go wrong, assessing how likely it is and how severe the impact would be, and applying measures to reduce the risk to an acceptable level. This approach goes beyond isolated fixes and looks at threats, vulnerabilities, and consequences across the entire system—people, facilities, information, and operations—and then prioritizes and implements safeguards, such as policies, training, technology, and procedures. It also emphasizes ongoing monitoring and adjustment as the threat landscape evolves.

The other options point to specific actions or resources rather than the overall process. Installing fences is a particular physical control, not the ongoing process of managing risk. Developing a budget for security equipment is about allocating resources, not assessing and reducing risk. Scheduling staff shifts and overtime is an operational task rather than a risk management cycle.