Security is not a standalone function; it must align with and support the broader mission and strategic goals of the organization. This includes protecting assets, enabling business continuity, and ensuring safety in a way that complements business objectives.
A (Quarterly cycle) is not a standard requirement.
B (Certified manager) is good practice but not a defining mandate.
D (Lowest cost) is not always ideal; effectiveness and alignment are more important than minimal cost.
References:
PSP Study Guide - Role of Security in Business Operations
POA Manual - Security as a Business Function

While terrorism countermeasures can be part of a broader protective strategy, they are not a core element in every protective system. Effective protective systems are designed based on specific threats and assets and typically integrate:
Physical measures (barriers, lighting)
Procedural measures (policies, response plans)
Threat/asset/risk alignment (A)
Terrorism countermeasures are highly specialized and situational-they are not a universal element in all protective systems, particularly for facilities not at risk of terrorism.
References:
PSP Study Guide - Risk-Based Security Design
ASIS Guidelines - Integrated Security Systems