|
|

What's the difference between a threat, a vulnerability and a risk?
While this question isn't specific to convergence, it's important to understand the differences among them.
Clearly Defined:
A threat is an external security issue represented by a natural or man-made attack. For example, a lightning bolt is a natural attack, since the lightning can threaten the safety and security of a data network. Likewise, an external intruder is a man-made threat that attempts to compromise a network.
A vulnerability is a specific degree of weakness of an individual computer or network exposed to the influence of a threat. For example, if you haven't applied the latest security patch to the operating system of your Web server, then you have a vulnerability because that computer system is exposed to potential intruders.
A risk is the degree of probability that a disaster will occur in light of the existing conditions, and the degree of vulnerability or weakness present in the system. The key difference between a threat and a risk is that a threat is related to the potential occurrence of a security issue, whereas a risk is the probability of an incident occurring based on the degree of exposure to a threat. Risk, for security purposes, is usually calculated in dollars and cents.
It's important to realize that you may have a vulnerability, but without a threat, you have no risk.
Evaluating each one of these factors is critical to knowing what security exposures you have, how critical they are and what effect they will have in your environment.
This little snippet was taken completely out of context from a 3 part article by Joel Pogar.
All 3 articles wil be appearing at CCSP over the weekend on Sunday the 31st of August.
In the final part of this series, Joel A. Pogar at Siemens Information and Communication Networks Inc. offers advice on the best way to secure a VOIP environment.
CW
|
|
|
 |
| "Security HeadLines: What's the difference between a threat, a vulnerability and a risk?" | Login/Create an Account | 0 comments |
|
| | The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
 |
|
|
|
|
Average Score: 5 Votes: 7

|
|
|