Risk Management Flashcards
What is the 1st line of defence?
What is the 2nd line of defence?
What is the 3rd line of defence?
What is a business continuity plan?
What is operational resilience?
Operational resilience is defined as an organisations ability to deliver critical operations through disruption
Operational resilience comprises of initiatives that expand business continuity management programs to focus on impacts, connected risk appetite and tolerance levels for disruption of product or service delivery to internal and external stakeholders(such as employees, customers, citizens and partners).
What is risk in Cybersecurity?
A measure of the extent of which an entity is threatened by a potential circumstance or extent.
Risks that arise through the loss of confidentiality, integrity or availability of information or information systems considering impact to organisational operations and assets, individuals, other organisations and the nation.
What is inherent risk?
Inherent risks in cybersecurity are vulnerabilities within an organisation before a set of controls or auditing procedures have been put in place. The inherent probability that a cyber attack may occur due to a lack of counter measures.
What is residual risk?
Residual risks are calculated after cybersecurity protections have been put in place to address the inherent risks. The calculation should include every attack vector that could affect important systems and data, including the potential impact should a cyber attack occur.
What is Third party risk management (TPRM)?