A change key is designed to operate a single specific lock within a keyed system and is typically assigned to an individual user for limited access. In key control systems, which are important in organizational and Human Resource security management, different key types are used to control access levels. A change key provides the lowest level of access, ensuring that employees can only enter authorized areas relevant to their roles. This supports accountability, reduces security risks, and helps enforce workplace policies. Options A and C describe functions of master or grand master keys, which open multiple locks. Option D refers to control or core keys used for lock maintenance. Proper use of change keys helps organizations maintain structured access control and protect assets, personnel, and sensitive areas effectively.

Security consultants are often retained to provide strategic input on staffing needs, policy design, and technology integration. Their advice helps organizations make informed decisions regarding the deployment of personnel, the structure of policies, and the selection of physical and electronic security systems.
References:
ASIS International, POA Manual, Chapter: Security Consulting and Contracting ASIS PSP Study Guide, Domain 2 and

In risk management and Human Resource contexts, assets are defined as anything that holds value to an organization, whether tangible or intangible. Tangible assets include physical items such as buildings, equipment, and technology, while intangible assets include intellectual property, employee skills, organizational reputation, and data. HR plays a critical role in protecting and developing intangible assets, particularly human capital, which is often one of the most valuable resources of an enterprise. Options A and B are too narrow because assets are not limited to fame or financial gain alone, and option C is incorrect as assets must have value. Recognizing all forms of assets helps organizations implement effective risk management, security measures, and workforce strategies. Therefore, option D correctly defines assets in a comprehensive and accurate manner.

A Business Impact Analysis (BIA) identifies critical functions and assesses the financial and operational impact of business disruptions. It helps prioritize recovery efforts and supports continuity planning by quantifying potential losses.
Enterprise impact analysis (A) and Managerial impact analysis (B) are not formal terms.
Critical process impact (C) is a component considered in the BIA but not the term itself.
References:
PSP Study Guide - Conducting a Business Impact Analysis
ASIS International - Business Continuity Management Framework