Record Detail Back
INFORMATION TECHNOLOGY RISK MANAGEMENT IN ENTERPRISE ENVIRONMENTS
- Share to:
Risk is a quantitative evaluation of the potential damage caused by an attack, a vulnerability, or an event impacting the set of company IT assets. A vulnerability (or weakness) is a lack of a safeguard, which may be exploited by a threat, causing harm to the information systems; specifically it can be a software flaw that permits an exogenous agent to use a computer system without authorization or use it with authorization in excess of that which the system owner specifically granted said agent. Risk-generating events and vulnerabilities are implicitly related in the context of this discussion in the sense that (we postulate that) a vulnerability is ultimately caused by some subtending event, malicious or nonmalicious. For example, in a so-called ‘‘non- malicious event,’’ a flaw may be introduced in some software release by its designers, and then the event of having the IT group load and distribute that software throughout the enterprise creates a predicament where risk ensues. A ‘‘malicious’’ event may be a direct attack on the organization firewall, router, website, or database platform.
Jake Kouns and Daniel Minoli - Personal Name
978-0-471-76254-6
NONE
Information Technology
English
2010
1-441
LOADING LIST...
LOADING LIST...