Think in security risks
Use assets, threats, vulnerabilities, and impact to reason about risk.
- Describe how a threat can exploit a vulnerability and affect an asset.
Cybersecurity protects the confidentiality, integrity, and availability of systems and information. Start with an asset: something valuable, such as customer records or a service. A threat is a possible cause of harm; a vulnerability is a weakness; risk combines the likelihood of exploitation with its impact. Controls reduce likelihood, impact, or both. Security is a continuing process because systems and threats change.
1assets = {"customer records": 5, "status page": 2}
2likelihood = 3
3risk_score = likelihood * assets["customer records"]
4print(f"illustrative risk score: {risk_score}")illustrative risk score: 15
This score is a teaching aid, not a universal measurement. Real decisions include uncertainty, existing controls, business context, and the people affected. Prioritize reducing meaningful harm, then revisit decisions as conditions change.
Key takeaways
Identify valuable assets before choosing controls.
A threat can exploit a vulnerability and cause impact.
Use risk to prioritize and revisit decisions as conditions change.
Lesson quiz
5 questions · pass with 4 correct · up to 50 XP
Passing this quiz completes the lesson and keeps your streak going. Questions you miss come back in review sessions later.
Questions about this lesson
Stuck? Ask. Figured something out? Share it. Explaining is one of the best ways to learn.
Loading posts…