An event or activity that has the potential to cause

harm to the information systems or networks

A weakness or lack of a safeguard that can be

exploited, causing

The potential for harm or loss to an information

system or network

An action against an information system or network

that attempts to violate the system security policy

Disengaging

Maintaining access

Gaining access

Reconnaissance

All of the above

Informed of the support that the organization will

provide

Informed of potential threat sources

Informed of the assets to be protected