SSCP: Systems Security Certified Practitioner

By ISC · Question Mode

QuestionQ229

VerifiedRisk Identification, Monitoring and Analysis

What is best defined as examining threat sources against system vulnerabilities to identify threats to a particular system in a particular operational environment?

Explanation

Threat analysis identifies applicable threats by examining threat sources in relation to a system’s vulnerabilities and its specific operational environment. Risk analysis additionally evaluates the likelihood and impact of resulting harm.

Community Discussion

No comments yet. Be the first to start the discussion!