CYBERSECURITY
56
RAPID7 : WHAT IS A THREAT ?
When there is an adversary with the intent , capability , and opportunity , a threat exists . When two or more of these elements are present ( e . g ., intent and capability , but no opportunity ), we call it an impending threat , because there is just one missing piece before it becomes a true threat . When there is just one element present ( e . g ., an opportunity in the form of a software vulnerability ), we call it a potential threat . There is the potential for it to turn into a true threat , although there are additional components that need to come to fruition before it has a real impact on most organisations .
JUNE 2020