Step 3: What does it really mean?

• Threats & Vulnerabilities & Consequences

conspire to produce Risks

• T+V+C -> R

• What is the threat?

  • Can it exploit the vulnerabilities?

• What are the consequences?

  • How do T&V lead to them?

• Risk is mitigated by defenses

  • Defenses leave residual risks
  • Is the residual risk appropriate?
  • Will the cure be worse than the disease?

Previous slide

Next slide

Back to first slide

View graphic version