Threats, Vulnerabilities and Risk
Three words are easy to mix up:
- A vulnerability is a weakness (an unpatched program, a guessable password).
- A threat is something or someone that could exploit it (a criminal, a careless insider, malware).
- Risk is the chance a threat uses a vulnerability, multiplied by the harm it would do.
You cannot fix everything, so you rank risks. A simple method scores likelihood and impact from 1 to 5 and multiplies them. Spend effort on the highest scores first.
Examplepython
Quick check
Which is a vulnerability?
Your turn: write the code
Score each risk as likelihood times impact and print the name of the highest-scoring risk.
Finish the quick check (and any code exercise) to complete this lesson, or mark it done yourself.
Tip: use the left and right arrow keys to move between lessons.