richardk/iso27diy-corp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Cleaned up Literature folder

Browse source
This commit is contained in:
Richard Kranendonk 2026-05-18 12:48:01 +02:00
parent 73a6380034
commit fe5eda4e05
586 changed files with 53911 additions and 2475 deletions
Download patch file Download diff file Expand all files Collapse all files

9
Corpus/Information Security/Risks/Risks vs Threats vs Vulnerabilities.md Normal file
View file

@ -0,0 +1,9 @@
# Risks vs Threats vs Vulnerabilities
[Source](https://securecontrolsframework.com/risk-management-model/)
Risks, threats and vulnerabilities are commonly misunderstood.
Fundamentally, vulnerability and risk management practices exist to achieve a minimum level of protection for an organization, which equates to a reduction in the total risk due to the protections offered by implemented controls. This can be conceptualized as a "risk management ecosystem" as it pertains to an organization's overall cybersecurity & data protection efforts.
These ecosystem components have unique meanings that need to be understood to reasonably protect people, processes, technology and data, as shown below:
![](Risks%20vs%20Threats%20vs%20Vulnerabilities%20SCF%20diagram.jpg)