Risk

Question 1

Risk

Answer 1

A measure of the extent to which an entity is threatened by a potential circumstance or event

Question 2

Impact

Answer 2

An adverse effect that results from an event occuring

Question 3

Vulnerability

Answer 3

A weakness in an information system that can be exploited to compromise a pillar of cyber security

Question 4

Threat

Answer 4

An actor or event with the potential to adversly impact an IS system

Question 5

Capability

Answer 5

The knowledge and skill set required by a threat to carry out an event

Question 6

Opportunity

Answer 6

The resources and positioning required by a threat to carry out an action

Question 7

Intent

Answer 7

The motivation of a threat to carry out an action

Question 8

Tenets of Risk Management Process

Answer 8

1. Identify Risks
2. Analyze Risks
3. Prioritize Risks
4. Address the Risk
5. Monitor the Risk

Question 9

Strategies for addressing Risk

Answer 9

1. Avoid
2. Control
3. Accept
4. Transfer