Identify three primary threat sources to industrial facilities.

• A. External threats (terrorism/vandalism), internal threats (insider misuse), natural hazards (fires, floods).
• B. Only cyber threats; just digital.
• C. Environmental noise; mechanical wear; software bugs.
• D. External threats (weather), internal threats (insiders), supply chain risk.

Answer: (A)

Three broad origins of risk for industrial facilities are external threats from outside the organization, internal threats from people within who might misuse access, and natural hazards that arise from the environment. External threats include deliberate acts like terrorism or vandalism aimed at damaging property or disrupting operations. Internal threats come from insiders—employees, contractors, or others with legitimate access—who misuse that access either on purpose or through negligence. Natural hazards cover events such as fires and floods that occur independently of human actions and can still severely impact safety and continuity.

Recognizing these three sources helps shape effective security planning: deter and monitor external threats at the perimeter and through surveillance; implement strong access controls and insider-risk measures to reduce internal misuse; and build resilience through fire protection, flood defenses, redundancy, and robust emergency response to withstand natural hazards. Other options either narrow the focus to cyber or digital issues or mix in factors that aren’t considered primary threat sources in standard industrial security practice, so they don’t capture the essential categories used for risk assessment.