1: Security principles - risk management process

Question 1

threat

Answer 1

person or thing that takes action to exploit (or make use of) a target organization’s system vulnerabilities, as part of achieving or furthering its goal or objectives.

Question 2

typical threat actors

Answer 2

• INSIDERS(either deliberately, by simple human error, or by gross incompetence).
• OUTSIDE individuals or informal groups (either planned or opportunistic, discovering vulnerability).
• Formal entities that are nonpolitical (such as business COMPETITORS and cybercriminals).
• Formal entities that are political (such as TERRORISTS, nation-states, and hacktivists).
• Intelligence or INFORMATION GATHERERS (could be any of the above).
• TECHNOLOGY (such as free-running bots and artificial intelligence , which could be part of any of the above).

Question 3

Threat Vector

Answer 3

The means by which a threat actor carries out their objectives.