Unit 1 Lab
Chapter 1 dealt with the basic fundamentals of risk management. It defined risk, threat vulnerability, and loss and their relationship to one another. Risk is how likely a loss will occur. A threat is anything that can cause possible damage. Vulnerabilities are weaknesses. When business functions or assests are compromised, they are losses. This chapter also covered the seven domains of a typical IT infrastructure. These include the User domain (the people, including employees, contractors, and consultants), Workstation domain (the end user’s computer), the LAN domain (the part of the network inside the firewall), the LAN-to-WAN domain (connection between the LAN and the outside network, or WAN), remote access domain (users who need to connect to network assets from outside the network via VPN or direct dial-up), WAN domain (also known as the Internet or cloud), and the system/application domain (the servers running server-level applications such as Exchange). This section of the chapter covers some typical risks at each level. Another important topic covered is the CIA triangle of Confidentiality, Integrity, and Availability. Confidentiality is protecting the network data from unauthorized access. Integrity is ensuring the data is protected and not modified or lost. Availability is making sure all of your assets and information are accessible when they are needed. The chapter closes by going over the importance of risk management and mitigation to an organization and techniques on how to accomplish it. Chapter two focuses more on managing risks. It addresses the uncontrollable nature of threats, meaning that you can’t eliminate threats and they will always be present, but you can address them in a way to make the potential of that threat happening decrease. Threats are broken down into two categories, unintentional and intentional. Unintentional threats are broken down further into four categories, Environmental (natural disasters, illnesses, epidemics), Human (keystroke errors, failure to input data or follow procedures), Accidents (accidental fire, power lines breaking due to