Threat is talking about a category of objects, persons, or other entities that pose a potential risk of loss to an asset

Vulnerability is a weakness or fault in the protection mechanisms for information assets

A process of examining and documenting the security posture of an organization’s information technology

It is not a part of malware attack goals

New viruses, worms, Trojan programs appear every time

The following are not types of assessments that might be preformed to test security controls:

Digital signature talks about

A device or software application that monitors a network or systems for malicious activity or policy violations

Testing strategies of the incident plan

Incident response strategy

Computer forensic stages are

A disaster is an incident that cannot be contained or whose impact is not controllable

Disaster recovery plan

Information security talks about confidentiality, integrity, and availability