Threat and Vulnerabilities

Question 1

What is Threat?

Answer 1

Anything that could cause harm, loss, damage, or compromise to our information technology systems.

This threats are from external sources eg:
● Natural disasters
● Cyber-attacks
● Data integrity breaches
● Disclosure of confidential information

Question 2

What is Vulnerability?

Answer 2

Any weakness in the system design or implementation.
Can come from internal factors like:
● Software bugs
● Misconfigured software
● Improperly protected network devices
● Missing security patches
● Lack of physical security

Question 3

What is the intersection between Threat and Vulnerabilities

Answer 3

This is where the risk to enterprise systems and networks lies
■ Threat + no matching vulnerability = no risk
■ Vulnerability + no matching threat = no risk

Question 4

What is Risk Management

Answer 4

Finding different ways to minimize the likelihood of an outcome occurring and achieve the
desired outcome

Question 5

What is Risk

Answer 5

This is the possibility of a negative outcome due to the presence of threats and vulnerabilities