Risk
Is the possibility of a threat exploiting a vulnerability and resulting in a loss.
Thread:
Is any circumstance or event that has the potential to compromise confidentiality, integrity, or availability.
Vulnerability:
is the weakness. It can be a weakness in the hardware, software, configuration, or users operation the system.
Risk Mitigation:
Reduces risk by reducing the chances that a threat wil exploit a vulnerability or by reducing the impact of the risk.
Security Controls:
Reduce risks. For Example, antivirus software is a security control that reduces the risk of malware infection.
No comments:
Post a Comment