CS-122 Day 2

2. A weakness that could be exploited by a threat.
4. The possibility that a threat will exploit a vulnerability and cause harm.
5. (DRP) A documented plan describing how technology and systems will be restored after a disaster or major disruption.
7. A major disruptive event that causes significant damage or prevents normal operations.
11. (BIA)A process used to identify critical business functions and determine how disruptions would affect them.
12. (DR) The process of restoring IT systems, infrastructure, applications, and data after a major disruption.
13. (IR) The organized process for detecting, analyzing, containing, eradicating, and recovering from a security incident.
14. (BCP)A documented plan describing how an organization will continue important operations during a disruption.

1. An event that may compromise the confidentiality, integrity, or availability of information or systems.
3. (BC) The ability of an organization to continue critical operations during and after a disruption.
6. A potential cause of harm to a system, organization, or person.
8. The harm or consequence resulting from a security event or disruption.
9. (IRP) A documented plan that explains how an organization will respond to cybersecurity incidents.
10. An event that interferes with normal operations or services.