Class Test Revision (2)

Question 1

What are the three essential components of security risk?

Answer 1

Threat
Vulnerability
Impact

Question 1

What is security risk?

Answer 1

It is the amount of harm that is likely to arise if no further action is taken

Question 2

Can you explain each of the component in security risk?

Answer 2

1) Threat - product of the intentions and capabilities of threat actors
2) Vulnerability - gaps or weaknesses in the potential victim’s protective security defences
3) Impact - measure of consequences of a successful attack

Question 3

Are security risks dynamic or adaptive?

Answer 3

Security risks are BOTH dynamic and adaptive, they can rapidly change over time and arise from the actions of purposeful actors

Question 4

What is protective security?

Answer 4

It is an enduring process, not a state.

Question 5

How does security risk relate to emergent properties of complex adaptive systems?

Answer 5

They are capable of undergoing very rapid, non-linear changes, the outcomes of which are impossible to predict.

Question 6

What is the aim of abstraction

Answer 6

When studying a system, the abstraction step aims at avoiding unnecessary details by classification, aggregation or generalization.

Question 7

Why is model never a reality?

Answer 7

Models simplify reality for the purpose of studying, but it is never reality.

Question 8

What is the downside of models and how can we overcome this?

Answer 8

Models are always a simplification according to Dekkers book in C3 (they represent a lower level of complexity that the original) hence the systems hierarchy of Boulding offers another way of looking at the validity of models from lower for higher levels.