Threats and Vulnerabilities Flashcards
Threat
Anything that could cause harm, loss, or damage, or compromise to our information technology systems
Where can threats come from
Natural disasters, cyber-attacks, data integrity breaches, and disclosure of confidential information
Vulnerability
Any weakness in the system design or implementation
Where do vulnerabilities come from?
Software bugs, Misconfigured software, improperly protected network devices, missing security patches, and lack of physical security
T/F If you have a threat, but no matching vulnerability do you have a risk?
F
T/F if you have a vulnerability, but there is no threat against it, is there a risk?
F
Risk management
Finding different ways to minimize the likelihood of an outcome and achieve the desired outcome