Threats and Vulnerabilities

Question 1

Vulnerability

Answer 1

Percentage of threat events that will become loss events.

Question 2

Calculate vulnerability

Answer 2

Threat capability vs. resistance strength

Percentage of threat events that become loss events.
Percentage of 1’s vs. 0’s.

Question 3

Threat capability continuum

Answer 3

Range of percentiles from 0-100 that threat communities are placed.

Question 4

When are we vulnerable in the capability continuum.

Answer 4

Any time the threat capability exceeds the resistance strength.

(Right of the line)

Question 5

What is the value for vulnerability if the resistance strength is greater than the threat capability?

Answer 5

0

Question 6

What is the value for vulnerability if the threat capability is greater than the resistance strength?

Answer 6

1

Question 7

How is loss event frequency determined?

Answer 7

Vulnerability vs. threat event frequency

Question 8

Is it best to start at the top or bottom of the FAIR model?

Answer 8

Top

Question 9

Threat event frequency x Vulnerability =

Answer 9

Loss Event Frequency

Question 10

Threat profiling

Answer 10

Profile of methods, motivations, resources.

Helps to identify threat communities.

Question 11

What does this question identify?

“who or what is capable of acting against my asset in a way that could cause loss?”

Answer 11

A threat