Threats and Vulnerabilities

Question 1

Vulnerabilities

Answer 1

Definition: Any weakness in the system design or implementation.
Normally it is within our organization be can be controlled to an extent.

Question 2

Source of Vulnerabilities

Answer 2

Software bugs, Misconfigured software, improperly protected network devices, Missing security patches, Lack of physical security. (Internal Factors)

Question 3

Intersection of threats and vulnerabilities is where the risk is

Answer 3

Threat + No Vulnerability = No Risk
Vulnerability + No Threat = No Risk

Question 4

Risk Management

Answer 4

Finding Different ways to minimize the likelihood of an outcome and achieve the desired outcome.