Threat
- •
What it is
- •
Why it matters
- •
"Threat" and "risk" get used interchangeably in everyday speech, but conflating them leads to bad security decisions. A threat is the possible event itself; separating it from the likelihood of that event (risk) is what lets you triage sensibly instead of treating every conceivable bad thing as equally worth defending against.
- •
- •
Distinguish from
- •
a Vulnerability is the underlying weakness itself, before it is acted upon
- •
a Risk is a threat measured by impact and probability
- •
- •