GCGA Ch. 1 Introducing Basic Risk Concepts (ST)

Question 1

Risk

Answer 1

the possibility of a threat exploiting a vulnerability and resulting in a loss.

Question 2

Threat

Answer 2

any circumstance or event that has the potential to compromise confidentiality, integrity, or availability.

Question 3

Vulnerability

Answer 3

a weakness. It can be a weakness in the hardware, software, configuration, or users operating the system.

Question 4

Risk mitigation

Answer 4

reduces risk by reducing the chances that a threat will exploit a vulnerability or reduce the risk’s impact. Security controls reduce risks. For example, antivirus software is a security control that reduces the risk of virus infection. One of the core jobs of security professionals is selecting an effective set of security controls to manage different types of risk.