Cybersecurity Fundamentals Chapter 4: Cybersecurity Risk and Attacks Quiz

Study Notes

The primary duty of cybersecurity is to protect systems, networks, and data from cyber threats and unauthorized access.
Understanding risk in cybersecurity is crucial for identifying vulnerabilities, prioritizing protection efforts, and ensuring resources are allocated effectively.

Compliance-based security, also known as regulatory security, focuses on adhering to laws and regulations to ensure organizational security practices.
A common issue with compliance-based security is that it may create a false sense of security, as organizations might meet minimum standards without enhancing overall protection.

Risk-based security relies on assessing and prioritizing risks to allocate resources effectively and efficiently.
This approach goes beyond an entity's risk tolerance and business needs by considering the evolving threat landscape and potential impacts on the organization.

According to ISO/IEC, risk is defined as the effect of uncertainty on objectives.
A threat is any potential danger that could exploit a vulnerability and cause harm to an asset.
An asset in cybersecurity is any valuable component within an organization, such as data, hardware, or software.
A weakness that could expose a system to adverse threats is termed a vulnerability.
Residual risk is the remaining risk after protective measures have been implemented.

According to Pfleeger (2015), threats are potential events that could cause harm or loss to an organization.
Different industries and professions adopt cybersecurity risk tactics based on criteria like regulatory requirements, risk exposure, and operational resilience.

Research from the University of Maryland indicates that a hacker attack occurs every 39 seconds on computers connected to the Internet.
A computer connected to the Internet experiences an average of 2.3 malicious attacks daily.

A common characteristic of cyberattacks is their automated nature, enabling large-scale exploitation of vulnerabilities.
The goal of developing new cyberattack methods is to improve effectiveness in bypassing security measures and achieving specific objectives.
Hackers continuously strive to exploit vulnerabilities in computers and networks due to the potential for financial gain, data theft, or disruption of services.