Domain 2 Risk Treatment: Risk Response Options - Risk Management Term Summary

A collection of flashcards summarizing key terms related to risk management, including their definitions and relationships.

Threat Agent

Something that's going to cause a threat, such as an attacker, a hurricane, or a fire.

Threat

Any potential danger that arises from a threat agent.

Vulnerability

A weakness that exists which can be exploited by threats.

Risk

The potential for damage to an asset, resulting from a threat exploiting a vulnerability.

Asset

Anything of value to an organization that is at risk of potential damage.

Impact / Exposure

The consequences of a risk, which can include loss of reputation, monetary loss, loss of confidentiality, or loss of integrity.

Safeguards

Controls implemented to prevent a risk from occurring, including directive, deterrent, and preventative controls.

Countermeasures

Controls that detect, react to, or correct risks that have occurred, including detective, corrective, recovery, and compensating controls.