1. The possibility that a particular threat will exploit a particular vulnerability of a data processing system. [2382-pt.8]
2. The likelihood that a successful attack will be mounted against a computer system. Risk is a function of both vulnerability and threat [CESG].

A managerial decision to accept a certain degree of risk, usually for technical or cost reasons. [2382-pt.8]

1. A systematic method of identifying the assets of a data processing system, the threats to those assets, and the vulnerability of the system to those threats. [2382-pt.8]
2. In COMSEC (communications security), an organized method of estimating or calculating the probability of compromise. [After X9.49]
3. Synonym [in INFOSEC] risk assessment.

1. See risk analysis.
2. [In INFOSEC, the] process of analyzing threats to and vulnerabilities of an information system (IS) and the potential impact the loss of information or capabilities of a system would have on national security. The resulting analysis is used as a basis for identifying appropriate and cost-effective countermeasures. [INFOSEC-99]
3. The process of reviewing the threats… (Read More →)

[The] difference between the minimum clearance or authorization of information system (IS) users and the maximum sensitivity (e.g., classification and categories) of data processed by the system. [INFOSEC-99]

[The] Process concerned with the identification, measurement, control, and minimization of security risks in information systems to a level commensurate with the value of the assets protected. [INFOSEC-99]

RSA is a public key encryption method RSA are the initials of the developers of the algorithm which was done at taxpayer expense. The basic security in RSA comes from the fact that, while it is relatively easy to multiply two huge prime numbers together to obtain their product, it is computationally difficult to go the reverse direction: to find… (Read More →)

Abbreviation for registered jack.

Abbreviation for remote job entry.

Root Mean Square