CyberVista Threat Identification & Risk Assessment Flashcards

What is the first step in a risk assessment?

Answer: Identifying assets and their value

The first step in any effective risk assessment is to identify and understand the assets that need protection, along with their value to the organization. This involves cataloging hardware, software, data, intellectual property, and critical business processes. By knowing what assets exist and their importance, organizations can then prioritize which ones require the most robust security measures against potential threats.

What is a threat in cybersecurity?

Answer: A potential cause of an unwanted incident

In cybersecurity, a threat refers to a potential cause of an unwanted incident that could harm an organization's assets or operations. Threats can be intentional, such as cyberattacks from malicious actors, or unintentional, like human error or natural disasters. Identifying threats is crucial for understanding potential vulnerabilities and developing effective security measures to mitigate risks.

Which of the following is an example of a vulnerability?

Answer: Unpatched software flaw

A vulnerability is a weakness or flaw in a system that can be exploited by a threat actor. An unpatched software flaw directly represents such a weakness, as it leaves the software susceptible to attacks that target that specific defect. The other options are security measures, not vulnerabilities.

What is the purpose of a risk matrix?

Answer: To assess the probability and severity of risks

A risk matrix is a fundamental tool in risk management used to visually assess and prioritize various risks. It typically plots the likelihood or probability of a risk event occurring against the potential impact or severity of that event. This helps organizations understand which risks are most critical and require immediate attention.

How is risk calculated in cybersecurity?

Answer: Likelihood x Impact

In cybersecurity, risk is commonly calculated as the product of the likelihood of a threat exploiting a vulnerability and the potential impact of that exploitation. This formula, Likelihood x Impact, provides a quantitative measure to prioritize risks. It helps organizations understand both how probable an event is and how severe its consequences would be.

Why is it important to classify assets?

Answer: To determine how to protect them

Classifying assets involves categorizing them based on their value, sensitivity, and criticality to the organization. This process is crucial because it helps determine the appropriate level of security controls and resources needed to protect each asset effectively. Without proper classification, it's difficult to implement targeted and cost-efficient security measures.

What is a common risk mitigation strategy?

Answer: Implementing security controls

Risk mitigation involves taking proactive steps to reduce the likelihood or impact of a risk. Implementing security controls, such as firewalls, access controls, encryption, and intrusion detection systems, directly addresses vulnerabilities and threats. These controls are designed to prevent, detect, or respond to security incidents, thereby reducing overall risk exposure.

What is a zero-day vulnerability?

Answer: An unknown and unpatched software flaw

A zero-day vulnerability refers to a software flaw that is unknown to the vendor and for which no patch or fix has been released. Attackers can exploit these vulnerabilities 'on day zero' of their discovery, before developers have a chance to address them. This makes them particularly dangerous as there is no immediate defense available.

What is risk acceptance?

Answer: Choosing to tolerate a known risk without mitigation

Risk acceptance is a deliberate decision by an organization to acknowledge a known risk and choose not to take any action to mitigate or transfer it. This decision is typically made when the cost of mitigation outweighs the potential impact of the risk, or when the risk is deemed to be within acceptable tolerance levels. It is a conscious choice, not simply ignoring the risk.