Which statement below best describes the relationship between information security aspects?

The correct answer is A. Threats exploit vulnerabilities to damage or destroy assets. This statement encapsulates the relationship between threats, vulnerabilities, and assets within the context of information security. Threats are potential causes of an unwanted incident, which may result in harm to a system or organization. Vulnerabilities are weaknesses that…

Fundamental Principles and Concepts of Information Security

Question

Options

AThreats exploit vulnerabilities to damage or destroy assets
BControls protect assets by reducing threats
CRisk is a function of vulnerabilities that harm assets

How the community answered

(36 responses)

A
86% (31)
B
8% (3)
C
6% (2)

Explanation

This statement encapsulates the relationship between threats, vulnerabilities, and assets within the context of information security. Threats are potential causes of an unwanted incident, which may result in harm to a system or organization. Vulnerabilities are weaknesses that can be exploited by threats to cause harm. Assets are valuable resources to an organization that need protection. Therefore, when threats exploit vulnerabilities, they can damage or destroy assets.

Topics

#threat-vulnerability relationship#assets#risk concepts#information security model

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice