From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Unlock the full course today

Join today to access over 24,200 courses taught by industry experts.

Threat classification

Threat classification

- [Instructor] Cybersecurity professionals must deal with a wide variety of threats as they plan and implement security controls. Conducting a threat analysis is an effective way to gauge the cybersecurity risk facing an organization. During a threat analysis, the cybersecurity team uses professional expertise, industry research, threat intelligence, and other information sources to develop a comprehensive list of the threats facing the organization. Once they've developed that list of threats, they then evaluate these threats based upon two criteria. First, they assess the likelihood of each threat. This likelihood judgment incorporates the team opinion about how likely it is that the threat will materialize and how likely it is that the threat will actually target their organization. This likelihood rating may vary significantly from organization to organization for the same threat. For example, consider the threat of an attack by a foreign government. The likelihood of this threat…

Contents