The ISSO is responsible for examining systems to see whether they are meeting stated security requirements
The following term is used to represent the likelihood of a threat source taking advantage of a vulnerability:
Which choice below represents an application or system demonstrating a need for a high level of confidentiality protection and controls?
The mission of this system is to produce local weather forecast information that is made available to the news media forecasters and the general public at all times. None of the information requires protection against disclosure
Destruction of the information would require significant expenditures of time and effort to replace. Although corrupted information would present an inconvenience to the staff, most information, and all vital information, is backed up by the either paper documentation or on disk
The application contains proprietary business information and other financial information, which if disclosed to unauthorized source, could cause an unfair advantage for vendors, contractors, or individuals and could result in financial loss or adverse legal action to user organizations
Unavailability of the system could result in inability to meet payroll obligations and could cause work stoppage and failure of user organizations to meet critical mission requirements. The system requires 24-hour access
Standards are the high-level statements made by senior management in support of information systems security
If risk is defined as “the potential that a given threat will exploit vulnerabilities of an asset or group of assets to cause loss or damage to the assets” the risk has all of the following elements except?