FUNDAMENTALS OF SECURITY

Question 1

What is a threat?

Answer 1

It is anything that can cause harm, loss, damage or compromise to our information technology systems(Natural disasters, Cyber attacks, data integrity breaches, disclosure of confidential information, ect)

Question 2

What is a vulnerability?

Answer 2

It is a weakness in the system design or implementation(Software bugs, misconfigured software, improperly protected network devices, missing security patches, lack of physical security , ect)

NB: The risk to our enterprise systems and network lies at the intersection of threats and vulnerabilities

Question 3

Define risk management

Answer 3

Risk Management is minimizing the likelihood of an outcome occurring and achieve the desired outcomes