Risk Management u Risk = Threat * Probability * Impact  Threat = an entity likely to have intent and capability to exploit a vulnerability in a system – Disgruntled Insiders (e.g., employees or contractors) – Hackers for Hire (e.g., State- or non-State sponsored) – Organized Crime – Terrorists  Probability = Likelihood of someone having intent, motivation and capability to exploit a known weakness in a system  Impact = Potential magnitude of harm to information or an information system resulting from someone actually exploiting a known weakness
{}