section 2 - threats and vulnerabilties

threat definition

anything that could cause harm, loss, damage, or compromise to information technology systems

what external factors do threats come from

natural disasters, cyber attacks, data integrity breaches, disclosure of confidential information

vulnerability definition

any weakness in the system design or implementation

vulnerabilities come from external or internal factors

internal

risk management

finding different ways to minimize the likelihood of an outcome occurring and achieve the desired outcomes

threat + no vulnerability

no risk

vulnerability + no threat

no risk

what internal factors create vulnerabilities

software bugs, misconfigured software, improperly protected network devices, missing security patches, lack of physical security