click below
click below
Normal Size Small Size show me how
Domain 2
Asset Security
Term | Definition |
---|---|
Risk | A measure of the extent to which an entity is threatened by a potential circumstance or event |
Asset | Assets are any entities that are valuable to an organization |
vulnerability | A weakness that can allow the Threat to do harm |
Threat | A threat is any incident that can cause damage to a system and can create a loss of confidentiality, availability, or integrity |
Exposure | Involves being susceptible to the exploitation of a vulnerability by a threat agent or event |
• Risk acceptance | The appropriate risk response when the identified risk is within the organization's level of risk tolerance |
Risk mitigation/reduction | Refers to the action taken to reduce the risk, such as fixing the fence. |
Risk transfer | Refers to having someone else accept the risk, typically through insurance. |
Risk avoidance | Refers to the elimination of hazards, activities and exposures that can negatively affect an organization and its assets |
• BCP(Business Continuity Planning) | Contains emergency procedures, backup schemes, resource allocation blueprints, and recovery procedures specific to potential disruptions. |
• security controls? | used to safeguard sensitive and important information or to have a countermeasure against its unauthorized use. |
• ITIL(Information Technology Infrastructure Library) | ITIL is a framework for effectively managing IT services throughout the entire service lifecycle |
• Security Governance | A comprehensive cybersecurity strategy that integrates with organizational operations and prevents the interruption of activities due to cyber threats or attacks. |