The three most common categories of risk in organizational security are:
Personnel: Risks to human safety and behavior.
Property: Risks to physical and digital assets.
Liability: Legal exposure due to negligence or failure to act.
This classification helps align mitigation strategies and insurance planning.
A and D incorrectly list "hazards" as a category rather than a risk source.
B omits personnel, a critical category.
References:
PSP Study Guide - Types of Risk
POA Manual - Risk Classification and Management

Backgrounding is the act of conducting a discreet investigation into an applicant's past and current activities.
This includes reviewing criminal records, employment history, education, and possibly financial or social behaviors to evaluate risk before hiring. It's a key aspect of the screening process for sensitive or high-trust positions.
Reporting and recording (B, D) involve documentation but not investigative vetting.
Supervisory (C) relates to management, not background checking.
References:
ASIS POA Manual - Chapter: Background Investigation
PSP Study Guide - Personnel Security Practices

A hybrid security system combines both proprietary (in-house) and contract security personnel. This model is used by organizations that want to retain control over some security functions while outsourcing others to reduce costs or gain specialized capabilities. For example, an organization may employ proprietary officers for critical access control but use contract guards for patrolling or monitoring.
References:
ASIS PSP Study Guide - Domain 3
Protection of Assets Manual - Security Personnel Structures

Comprehensive Detailed Explanation:
Asset value in physical security is determined not just by its original purchase cost, but by:
Criticality: How essential the asset is to operations or mission success.
Ease of Replacement: Difficulty or time involved in replacing the asset.
Some Measure of Value: This may include financial worth, proprietary importance, or symbolic significance.
This broader view reflects operational risk more accurately than financial cost alone.
A, B, and C mention components but do not include all three core elements correctly.
References:
PSP Study Guide - Asset Valuation
POA Manual - Determining Asset Criticality and Value

Effective security design must balance technological advances with operational realities, organizational priorities, and human behavior. This holistic approach ensures the system is usable, sustainable, and aligned with company goals.
A (Adversary diagrams) and B (Threats and likelihood) are analytical tools, not integration principles.
D omits the critical "human element," which affects usability and compliance.
References:
PSP Study Guide - Security Design Principles
POA Manual - Integrated Security Planning and Human Factors