Which assets require security plans in the IDP?

• A. PL-designated assets and assets exceeding commander's risk tolerance.
• B. All assets equally.
• C. Only assets within secure perimeters.
• D. Only assets with public access.

Answer: (A)

Security planning in the IDP is driven by how critical an asset is and what level of risk it poses. Protection Level designations identify assets that need special safeguarding, and if an asset’s risk is judged to exceed the commander's risk tolerance, it requires a security plan. This means resources are focused on high-risk, high-value assets rather than applying the same level of planning to every asset. Assets that aren’t PL-designated and don’t surpass the risk threshold don’t automatically require a formal security plan, even if they’re within secure perimeters or have public access. Public access alone isn’t the determinant; what matters is the risk level relative to what the commander is willing to accept. So the correct rule is to require security plans for Protection Level assets and for those exceeding the commander's risk tolerance.