Karteikarten
Threats and Vulnerabilities
Karten in diesem Stapel (4)
- 1Threat■ Anything that could cause harm, loss, damage, or compromise to our information
technology systems
■ Can come from the following
● Natural disasters
● Cyber-attacks
● Data integrity breaches
● Disclosure of confidential information - 2Vulnerability■ Any weakness in the system design or implementation
■ Come from internal factors like the following
● Software bugs
● Misconfigured software
● Improperly protected network devices
● Missing security patches
● Lack of physical security - 3threats and vulnerabilities intersect■ If you have a threat, but there is no matching vulnerability to it, then you have no
risk
■ The same holds true that if you have a vulnerability but there’s no threat against
it, there would be no risk - 4Risk Management■ Finding different ways to minimize the likelihood of an outcome and achieve the
desired outcome
Informationen
- Beschreibung
- Karteikarten am Threats and Vulnerabilities, erstellt von Andrew Howe am 31/05/2025.
- Erstellt von
- Andrew Howe
- Aufrufe
- 1
- Bewertung