Vocabulary #1

Indicators of compromise

• IOC

• IOS

• threat

• attack vector

Some or all of the risk is transferred to a willing third party

• risk transfer

• risk avoidance

• impact

• vulnerability

The process that balances the operational costs of providing protective measures with the gains achieved by protecting the asset

• risk management

• risk transfer

• vulnerability broker

• cybercriminal

When data is intentionally or unintentionally lost, stolen, or leaked to the outside world

• data loss

• threat

• attack surface

• risk

A path by which a threat actor can gain access to a server, host, or network

• attack vector

• assets

• vulnerability

• IOC

Email/social networking, encrypted devices, cloud storage devices, removable media, hard copy, improper access control

• common data loss vectors

• attack surface

• exploit

• risk acceptance

Anything of value to an organization

• assets

• threat

• exploit

• risk

Potential danger to an asset such as data or the network itself

• threat

• vulnerability

• countermeasure

• impact

Weakness in a system or its design could be exploited by a threat

• vulnerability

• risk management

• IOC

• IOA

The total sum of the vulnerabilities in a given system that are accessible to an attacker

• attack surface

• exploit

• risk acceptance

• impact