click below
click below
Normal Size Small Size show me how
Domain 2
Asset Security
| Term | Definition |
|---|---|
| Risk | A measure of the extent to which an entity is threatened by a potential circumstance or event |
| Asset | Assets are any entities that are valuable to an organization |
| vulnerability | A weakness that can allow the Threat to do harm |
| Threat | A threat is any incident that can cause damage to a system and can create a loss of confidentiality, availability, or integrity |
| Exposure | Involves being susceptible to the exploitation of a vulnerability by a threat agent or event |
| • Risk acceptance | The appropriate risk response when the identified risk is within the organization's level of risk tolerance |
| Risk mitigation/reduction | Refers to the action taken to reduce the risk, such as fixing the fence. |
| Risk transfer | Refers to having someone else accept the risk, typically through insurance. |
| Risk avoidance | Refers to the elimination of hazards, activities and exposures that can negatively affect an organization and its assets |
| • BCP(Business Continuity Planning) | Contains emergency procedures, backup schemes, resource allocation blueprints, and recovery procedures specific to potential disruptions. |
| • security controls? | used to safeguard sensitive and important information or to have a countermeasure against its unauthorized use. |
| • ITIL(Information Technology Infrastructure Library) | ITIL is a framework for effectively managing IT services throughout the entire service lifecycle |
| • Security Governance | A comprehensive cybersecurity strategy that integrates with organizational operations and prevents the interruption of activities due to cyber threats or attacks. |