Chapter 1 Risk Management Flashcards
Defining Business Risk
What is a threat in the context of business risk?
Anyone or anything threatening to grab any information
Threats can include external entities or internal vulnerabilities that pose a risk to the confidentiality, integrity, or availability of information.
What is a vulnerability?
Weaknesses or gaps in our security that allows threats to access our assets.
What is risk?
Risk is the potential for a threat to exploit a vulnerability and cause harm to our assets
None
What is cybersecurity primarily about?
Understanding and protecting our assets
Assets can include data, networks, and systems.
What is a key aspect of cybersecurity related to potential threats?
Recognizing risk
Risk recognition involves identifying potential threats to information security.
What does cybersecurity aim to address in relation to systems and data?
Addressing vulnerabilities
Vulnerabilities are weaknesses that can be exploited by threats.
What is the goal of cybersecurity in terms of risk management?
Minimizing the risk
This involves implementing strategies to reduce the likelihood of security breaches.
What does the CIA Security Triad stand for?
Confidentiality, Integrity & Availability
What is the primary purpose of the CIA Security Triad?
It is the backbone of cybersecurity.
What does confidentiality ensure?
Data is only accessible to those who have the authority to view it.
Confidentiality is a key principle in information security.
What does integrity ensure in data management?
Integrity ensures data remains unaltered and genuine.
Without integrity, systems and data can’t be trusted.
What does availability ensure?
Systems, applications, and data are available and operational when needed.
