richardk/iso27diy-corp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

removed emoji from filenames, Obsidian changed all relevant links

Browse source
This commit is contained in:
Richard Kranendonk 2026-05-07 15:01:04 +02:00
parent d316285a74
commit 68f1c38681
638 changed files with 710 additions and 3176 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Corpus/🎇 Sparks/Risks vs Threats vs Vulnerabilities.md
View file

@ -1,7 +0,0 @@
# Risks vs Threats vs Vulnerabilities
[Source](https://securecontrolsframework.com/risk-management-model/)
Risks, threats and vulnerabilities are commonly misunderstood.
Fundamentally, vulnerability and risk management practices exist to achieve a minimum level of protection for an organization, which equates to a reduction in the total risk due to the protections offered by implemented controls. This can be conceptualized as a "risk management ecosystem" as it pertains to an organization's overall cybersecurity & data protection efforts. These ecosystem components have unique meanings that need to be understood to reasonably protect people, processes, technology and data, as shown below:
![](2023-scf-risk-management-ecosystem%201.jpg)