Isaca IT Risk Terms Module 1

Front

Define Risk

Back

Combination of the likelihood of an event and it's impact

Front

What is Risk most associated with?

Back

Risk is most associated with uncertainties and deviations from expected results causing harm to the enterprise.

Front

Define Event

Back

Something that happens at a specific place and/or time.

Front

What are other words used to describe an event?

Back

Incident, exploit, and attack

Front

Define Incident

Back

Non-standard operation which causes an interruption or reduction in quality of service.

Front

Define Exploit

Back

Taking full use of a vulnerability for the benefit of an attacker.

Front

Define Attack

Back

The actual occurrence of an adverse event

Front

Define Threat

Back

Anything that is capable of acting against an asset in manner that can result in harm.

Front

Where are threats aimed?

Back

At exploiting enterprise vulnerabilities

Front

Define Vulnerability

Back

Control condition considered deficient relative to threat level requirements faced by the enterprise.