| |
|||||||
![]() |
|||||||
| |
|||||||
|
|
|
|||||
Definitions and Terminology
A
B C
D E
F G
H I
J K
L M
N O
P Q
R S
T U
V W
X Y
Z RiskThe potential that a given threat will exploit vulnerabilities of an asset or group of assets to cause loss and/or damage to the assets. It usually is measured by a combination of impact and probability of occurrence. source: COBIT 4.0 combination of the probability of an event and its consequence source: ISO17799:2005 and ISO27002:2005 the potential that a given threat will exploit vulnerabilities of an asset or group of assets and thereby cause harm to the organization. It is measured in terms of a combination of the probability of an event and its consequence source: ISO13335-1, 2004 The possibility that an event will occur and adversely affect the achievement of objectives. source: COSO, 2004 A possible event that could cause harm or loss, or affect the ability to achieve Objectives. A Risk is measured by the probability of a Threat, the Vulnerability of the Asset to that Threat, and the Impact it would have if it occurred. source: ITIL v3, Service Operation, 2007 A possible event that could cause harm or loss, or affect the ability to achieve Objectives. A Risk is measured by the probability of a Threat, the Vulnerability of the Asset to that Threat, and the Impact it would have if it occurred. source: ITIL v3, Service Design, 2007 A possible event that could cause harm or loss, or affect the ability to achieve Objectives. A Risk is measured by the probability of a Threat, the Vulnerability of the Asset to that Threat, and the Impact it would have if it occurred. source: ITIL v3, Service Transition, 2007 A possible event that could cause harm or loss, or affect the ability to achieve Objectives. A Risk is measured by the probability of a Threat, the Vulnerability of the Asset to that Threat, and the Impact it would have if it occurred. source: ITIL v3, Continual Service Improvement, 2007 A possible event that could cause harm or loss, or affect the ability to achieve Objectives. A Risk is measured by the probability of a Threat, the Vulnerability of the Asset to that Threat, and the Impact it would have if it occurred. source: ITIL v3, Service Strategy, 2007
|
|
||||||
|
|||||||