ISC2 Certified in Cybersecurity (CC)Security PrinciplesEasy
A global conglomerate is evaluating potential threats to its intellectual property, which includes highly sensitive research and development data. They are particularly concerned about industrial espionage from state-sponsored actors. What term best describes this type of malicious activity aimed at stealing trade secrets?
- ARisk Appetite
- BLikelihood
- CVulnerability
- DThreat
Show answer & explanationAnswer & explanation
Correct answer: D. Threat
A threat is any potential danger that is always present and can exploit a vulnerability to breach security and cause harm. State-sponsored industrial espionage is an example of a threat actor and their associated malicious activity.
Why the other options are wrong
- A. Risk appetite is the level of risk an organization is willing to accept.
- B. Likelihood is the probability that a given threat will actually materialize.
- C. A vulnerability is a weakness that could be exploited, not the malicious activity itself.
Threat
A potential danger that is always present and can exploit a vulnerability to breach security and cause harm.
- Can be intentional or accidental.
- Examples: hackers, natural disasters, insider mistakes.
- Requires a vulnerability to cause harm.
Memory trick: Threats are dangers, vulnerabilities are weaknesses, risks are outcomes.