EPI’s physical security framework requiresmandatory background screeningforallindividuals assigned to security roles, regardless of:

previous experience

certifications

law enforcement background

length of employment

Security personnel have privileged access to sensitive areas and are responsible for enforcing access control, incident response, and compliance. Therefore:

No exemptionsare permitted.

Prior experience or certification doesnotreplace a formal background check.

Even previous law enforcement staff must undergo screening.

Thus, the correct answer isC.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Background screening is mandatory for all security personnel.

No exceptions are permitted, regardless of experience or qualifications.

In the EPI framework for risk management, after the risk identification and risk analysis steps, therisk evaluationstep determines whether the assessed risks areacceptableorrequire treatmentbased on the organization’s risk appetite, criteria, and the potential impact. The evaluation leads to a decision on whether risk treatment needs to take place.

It isnotsimply compiling all risks (so option C is incorrect).

It isnotexclusively about budgeting (so option D is incorrect) though budgeting follows treatment decisions.

It isnotnecessarily advising to accept all risks (so option B is incorrect) but rather it supports decision-making on treatment.

Therefore, option A is correct: the outcome is the decision whether to treat the risk.

EPI DCFOM-Aligned Reference Concepts

Risk evaluation assesses identified and analysed risks against risk criteria to decide on acceptability or need for treatment.

The outcome is a documented decision-making step in the risk management process.

Stakeholder involvement must beginat the very start of the project lifecycle, during theInitiation Phase, because:

Stakeholders influence project scope, objectives, and constraints.

Their expectations and requirements must be captured early.

Stakeholder identification is a mandatory output of the initiation process.

Failing to involve them early leads to misalignment, rework, and scope conflicts.

EPI aligns with general project management principles that state:

“Stakeholder identification and engagement begins at project initiation and continues throughout the entire project.”

Why other options are incorrect:

B: Planning depends on stakeholder input already gathered.

C: Too late—execution requires validated stakeholder requirements.

D: Monitoring occurs after execution has begun.

Thus,Ais correct.

EPI DCFOM-Aligned Reference Concepts (Paraphrased)

Stakeholders must be identified and engaged in the initiation phase.

Their input forms the foundation for scope definition and planning.