Title: Describe the difference between a cyber threat and a vulnerability in
Course: Cybersecurity in Family and Consumer Sciences (19299-I-36) > Section: Understanding Cyber Threats and Vulnerabilities in Family and Consumer Sciences

Description should include defining

- threat – a circumstance or event that has or indicates the potential to exploit vulnerabilities and to adversely affect organizational operations, organizational assets (e.g., information, information systems), individuals, other organizations, or society
- vulnerability – a characteristic or specific weakness that renders an organization or asset (such as information or an information system) open to exploitation by a given threat or susceptible to a given hazard
- asset (as related to a secure environment) – persons, structures, facilities, information and records, information technology systems and resources, materials, processes, relationships, or reputation that has value
- exploit – a technique to breach the security of a network or information system in violation of security policy
- attack vector – a path or route used by the adversary to gain access to the target
- threat agents – an individual, group, organization, or government that conducts or has the intent to conduct detrimental activities
- safeguards – a practice, procedure, or mechanism that reduces risk.

Process/Skill Questions:

- What is an attack vector?
- What is the difference between a cyber threat and a vulnerability?
- What are safeguards to minimize security risks?
- Why is it important to protect oneself from cyber threats?
- What is vulnerability management?

Teacher Resources:

- National Initiative for Cybersecurity Careers and Studies (NICCS)
- Information System and Audit Control Association (ISACA)