Threat

From CIPedia
Revision as of 01:19, 8 April 2023 by Eluiijf (talk | contribs) (→‎Turkey)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

The definitions of "Threat" and "Hazard" are very similar, so maybe the terms do not need to be distinguished. A CI-specific usage example for the above terms can be found on the "Hazard" entry.

Definitions

European Definitions

Any indication, circumstance, or event with the potential to disrupt or destroy CI, or any element thereof. [1]

The European Commission's CBRN Glossary[2] defines threat as

The likelihood of occurrence of a hazard or event with a harmful effect. In contrast to risk, a threat is not related to the impact it may cause. In the context of public health, a threat is defined as a substance, condition or event, which by its presence has the potential to rapidly harm an exposed population, sufficiently lead to a major crisis. [2]


Cyber threat means any potential circumstance, event or action that could damage, disrupt or otherwise adversely impact network and information systems, the users of such systems and other persons. [3]


ENISA

Threat is any circumstance or event with the potential to adversely impact an asset through unauthorized access, destruction, disclosure, modification of data, and/or denial of service. [4]


European Project Definitions

CIPRNet project

The CIPRNet project [5] uses the following definition:

Threat is any indication, circumstance, or event with the potential to disrupt or destroy critical infrastructure, or any element thereof (EU, 2006)


Other International Definitions

IAEA

Threat is defined as:
(1) A person or group of persons with motivation, intention and capability to commit a malicious act.
(2) A likely cause of harm to people, damage to property or harm to the environment by an individual or individuals with the motivation, intention and capability to commit a malicious act.
An entity with motivation, intention and capability to commit a malicious act.
(4) A characterization of an adversary capable of causing undesirable consequences, including the objectives, motivation and capabilities, e.g. number of potential attackers, equipment, training and attack plan.
(5) The potential cause of an unwanted incident, which may result in harm to a system or organization. [6]



ITU-T

A threat is a potential violation of security. [7]


Manace: Violation potentielle de la sécurité. [8]


Amenaza: Violación potencial de la seguridad. [9]


NATO CEP / EAPC

A threat is any event that has the potential to disrupt or destroy critical infrastructure, or any element thereof. [10]

An all hazards approach to threat includes accidents, natural hazards as well as deliberate attacks.

EU Project VITA

A threat is a source of impending danger or harm. [11]

The semantics of that definition in the context of CI is that a threat to a CI may give rise to serious consequences to critical societal functions, including the supply chain, health, safety, security, economic or social well-being of people.

National Definitions

Albania

Kërcënim/sulm kibernetik (threat/cyber attack) – konsiderohet çdo përpjekje e drejtuar/qëllimshme për të marrë akses, manipuluar, ndërhyrë ose dëmtuar integritetin, konfidencialitetin, sigurinë dhe/ose disponibilitetin e të dhënave, të një aplikimi ose të të dhënave të sistemit kompjuterik, pa patur autoritet ligjor për ta bërë këtë. [12]



Argentina

Amenaza: Una causa potencial de un incidente no deseado, el cual puede ocasionar daños a un sistema u organización. [13]



Australia

Threat: A source of harm that is deliberate or has intent to do harm. [14]
New South Wales
Threat: A hazard, usually man-made, that deliberately disrupts critical infrastructure service provision. [15]


Bosnia and Herzegovina

Pretnja je potencijalni štetni fizički događaj, fenomen ili aktivnost namjernog/zlonamjernog karaktera. [16]



Brazil

Ameaça: causa potencial de um incidente indesejado, que pode resultar em dano para um sistema ou organização. [17]

Threat is the cause potential of an undesired incident which may result in harm to a system or organisation.



Burkina-Faso

Menace: Cause potentielle d’un événement indésirable, pouvant entraîner des dommages au sein d’un système ou d’un organisme. [18]



Canada

Threat is the presence of a hazard and an exposure pathway.

Présence d’un danger et d’une voie d’exposition. [19] [20]

Threats may be natural or human-induced, either accidental or intentional.

Colombia

Amenaza: Violación potencial de la seguridad (Potential violation of safety) [21]

Amenaza informática: La aparición de una situación potencial o actual donde un agente tiene la capacidad de generar una agresión cibernética contra la población, el territorio y la organización política del Estado (Ministerio de Defensa de Colombia)

Translation: A threat generally is a circumstance or event through which harm can occur.

The harm refers to a specific value such as financial assets, knowledge, items, or health.

Czech Republic

Hrozba: Potenciální příčina nechtěného incidentu, jehož výsledkem může být poškození systému nebo organizace. [22]

Threat: Potential cause of an unwanted incident which may result in damage to a system or organization. [23]



Egypt

Threat: Capabilities, intentions, and attack methods of adversaries to exploit, or any circumstance or event with the potential to cause harm to, information or an information system. [24]



El Salvador

Amenaza: Cualquier cosa, persona, hecho o acontecimiento que constituye una posible causa de riesgo o perjuicio para alguien o algo. [25]


Amenaza (Hazard): Peligro latente que representa la posible manifestación dentro de un período de tiempo y en un territorio particular de un fenómeno de origen natural, socio-natural o antropogénico, que puede producir efectos adversos en las personas, la producción, la infraestructura, los bienes y servicios y el ambiente. [26]

Es un factor de riesgo externo de un elemento o grupo de elementos expuestos, que se expresa como la probabilidad de que un evento se presente con una cierta intensidad, en un sitio especifico y en dentro de un periodo de tiempo definido.

Finland

Uhka: mahdollisesti toteutuva haitallinen tapahtuma tai kehityskulku.

Threat is possibly realising adverse event or development. -unofficial translation- [27]



France

(in French) Menace: tout événement physique, phénomène ou activité humaine potentiellement préjudiciable, susceptible de provoquer des décès ou des lésions corporelles, des dégâts matériels ou immatériels, des perturbations sociales et économiques ou une détérioration de l’environnement. Pour la démarche de sécurité des secteurs d’activités d’importance vitale, les menaces seront réputées avoir un caractère malveillant ou être de nature terroriste. [28]

A non-official translation is the following:

Any physical event, phenomenon or human activities potentially harmful, that could cause death or injuries, material or immaterial damage, social and economic disruption or environmental degradation. Meant for a security approach of vital activity sectors (CI-sectors), threats will be considered as having a malicious character or as terrorist activities.


Menace: Cause potentielle d’un incident indésirable, qui peut nuire à un système ou à une organisation. [29]

Threat: Potential cause of an undesirable incident, which may harm a system or organisation. [30]



Germany

Eine Bedrohung ist ganz allgemein ein Umstand oder Ereignis, durch den oder das ein Schaden entstehen kann. [31]

Der Schaden bezieht sich dabei auf einen konkreten Wert wie Vermögen, Wissen, Gegenstände oder Gesundheit. Übertragen in die Welt der Informationstechnik ist eine Bedrohung ein Umstand oder Ereignis, der oder das die Verfügbarkeit, Integrität oder Vertraulichkeit von Informationen beeinträchtigen kann, wodurch dem Besitzer bzw. Benutzer der Informationen ein Schaden entstehen kann. Beispiele für Bedrohungen sind höhere Gewalt, menschliche Fehlhandlungen, technisches Versagen oder vorsätzliche Handlungen. Trifft eine Bedrohung auf eine Schwachstelle (insbesondere technische oder organisatorische Mängel), so entsteht eine Gefährdung.

Unter Gefahr versteht man, einen Zustand, Umstand oder Vorgang, durch dessen Einwirkung ein Schaden an einem Schutzgut entstehen kann. [32]



Guatemala

Amenaza: Fenómeno intencional generado por el poder de otro Estado, o por agentes no estatales, cuya característica es la integración de la capacidad y voluntad hostil que pone en peligro de vulneración particularmente grave, a los intereses y objetivos nacionales, en parte o en todo el país que cuestiona la existencia del mismo Estado. [33]


Amenaza: Fenómeno o evento potencialmente destructor o peligroso, de origen natural o producido por la actividad humana (antrópico), que puede causar muertes, lesiones, epidemias, daños materiales, interrupción de la actividad social y económica, degradación ambiental y amenazar los medios de subsistencia de una comunidad o territorio en un determinado período de tiempo. [34]



Haiti

Menace: C’est une action réelle ou une manifestation que formule un acteur ou des acteurs, dans l’objectif de signifier à un autre ou à d’autres, la capacité ou l’intention d’occasionner un effet négatif à ses biens ou intérêts. Elle implique l’existence d’une volonté de causer un dommage aux biens ou intérêts d’autrui. [35]



Hong Kong

威脅 : 可能對機構及其資產有害的潛在保安因素。

Threat: A potential violation of security that may cause harm to an organisation and its assets. [36]



India

Threat is a circumstance or event with the potential to cause harm to a system, including the destruction, unauthorised disclosure, or modification of data and/or denial of service. [37]



Japan

脅威: セキュリティの侵害についての潜在的可能性。これは、セキュリティを侵害し、加害をもたらす可能性がある状況、能力、行為もしくはイベントがあるとき存在する.

(Cyber) Threat is a potential for violation of security, which exists when there is a circumstance, capability, action, or event that could breach security and cause harm. [38]



Kingdom of Saudi Arabia

Threat is an agent that exploits security vulnerabilities and risks. [39]



Lebanon

Threat: Any circumstance or event with the potential to adversely impact an asset through unauthorized access, destruction, disclosure, modification of data, and/or denial of service. [40]


Mexico

Amenaza(s): ​Cualquier posible acto que puedacausaralgúntipodedañoalosactivosde información de las dependencias o entidades de la APF, los Poderes Legislativo y Judicial, los órganos constitucionales autónomos, las empresas productivas del Estado, los Gobiernos​ ​Estatales,​ ​Municipales​ ​y​ ​Delegacionales,​ ​así​ ​como​ ​los​ ​particulares. [41]


Amenaza: Peligro latente que representa la probable manifestación de un fenómeno físico de origen natural, socio-natural o antropogénico, que se anticipa puede producir efectos adversos en las personas, la producción, la infraestructura y los bienes y servicios. [42]

Es un factor de riesgo físico externo a un elemento o grupo de elementos sociales expuestos, que se expresa como la probabilidad de que un fenómeno se presente con una cierta intensidad, en un sitio especifico y dentro de un periodo de tiempo definido.

Morocco

Menace: Cause potentielle d’un incident indésirable, pouvant entraîner des dommages au sein d’un système ou d’une entité. [43]



Netherlands

Cyber threat: Cyberdreiging is een cyberincident dat zich kan voordoen of een combinatie van gelijktijdige of opeenvolgende cyberincidenten. [44]


A threat is an event or a process which potentially can lead to an incident.

Een gebeurtenis of een proces die in potentie tot een incident kan leiden. [45]

Het hogere doel (intentie) kan zijn het verstevigen van de concurrentiepositie; politiek/landelijk gewin, maatschappelijke ontwrichting of levensbedreiging. [46]



Dreiging (threat): Een potentiële oorzaak voor het optreden van een ongewenst incident die kan leiden tot schade aan een object, systeem of de organisatie. [47] [48]



Amenaza: Signo o indicio que anuncia un peligro. Acción o evento susceptible de producirse, transformarse en agresión contra un entorno o unos recursos y actuar en detrimento de su seguridad Fuente: Guía de Ciberseguridad para los países en desarrollo. [49]


Norway

Trusselaktør: entitet som utgjør en reell eller potensiell trussel mot et identifiserbart mål eller i en avgrenset og identifiserbar sammenheng. [50]

Threat: an entity that constitutes a real or potential threat to an identifiable goal or in a limited and identifiable context. [51]



Oman

Threa": A potential for violation of security, which exists when there is a circumstance, capability, action, or event that could breach security and cause harm. [52]



Philippines

Cyber threats are events, situations and conditions that tend to reduce, degrade and destroy digital infrastructures. [53]


Threat: Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. [54]


Threat: The potential for a threat-source to successfully exploit particular information system vulnerability. [55]


Threat: A possible danger that might exploit a vulnerability to breach security and therefore cause possible harm. [56]



Poland

Zagrożenie (cyberbezpieczeństwa) – potencjalną przyczynę incydentu. [57]


Portugal

[Definição] Ameaça: Causa potencial de incidente indesejável que pode resultar em danos para uma organização ou qualquer dos sistemas por ela utilizados. Estas ameaças podem ser acidentais ou deliberadas (com dolo) e caracterizam-se por elementos ameaçadores, alvos potenciais e métodos de ataque. [58]


[Definição] Ameaça: Potencial causa de um incidente indesejado, que pode provocar danos a um sistema, indivíduo ou organização. [59]



Republic of Trinidad & Tobago

A natural or manmade occurrence, individual, entity, or action that has or indicates the potential to harm life, information, operations, the environment, and/or property. [60]



Singapore

A man-made or natural situation or condition that can cause disruption to an organization’s operations or services. [61]



Slovakia

Ohrozenie: Stav systému, ktorý vzniká a trvá v dôsledku existencie a uvedomenia si potenciálneho narušenia jeho rovnovážneho stavu. Je to aktivizované riziko, ktoré pôsobí proti záujmom subjektu, a konkrétnej situácie, ktoré bezprostredne znemožňujú naplnenie jeho záujmov. [62]



South Africa

‘‘isenzo esinobungozi’’ kungaba sisenzo esilulwaphulo-mthetho, sobugrogrisi, okanye esenzeke ngengozi, okanye ukungenziwa kwesenzo ebesimele senziwe ukuthintela ulwaphulo-mthetho, ubugrogrisi okanye ukwenzeka kwento ngengozi, okunokuthi kubangele umonakalo okanye ukulahlekelwa ziziseko ezibalulekileyo ezingundoqo okanye kubangele ukungakwazi ukunika iinkonzo ezisisiseko zoluntu, kwaye lisengaquka intlekele yendalo enokubangela ukuba sisisulu kweziseko ezibalulekileyo ezingundoqo

‘‘threat’’ includes any action or omission of a criminal, terrorist or accidental nature which may potentially cause damage, harm or loss to critical infrastructure or interfere with the ability or availability of critical infrastructure to deliver basic public services, and may involve any natural hazard which is likely to increase the vulnerability of critical infrastructure to such action or omission. [63]



Spain

Amenaza (Threat): La posibilidad de compromiso, pérdida o robo de información clasificada OTAN o de servicios y recursos que la soportan. [64]

Una amenaza puede ser definida por su origen, motivación o resultado y puede ser deliberada o accidental, violenta o subrepticia, externa o interna.

Switzerland

Als Gefährdung wird eine konkrete Gefahr bezeichnet, die für ein konkretes Schutzgut besteht. [65]

Die Gefährdung entspricht daher einem potentiellen Ereignis oder einer potentiellen Entwicklung mit möglichen Auswirkungen für ein Schutzgut.

Türkiye

Tehdit: Bir kurumun veya sistemin zarar görmesi ile sonuçlanabilecek istenmeyen bir olayın potansiyel nedenini [66]

Threat: The potential cause of an incident that may cause damage to an institution or system. [67]



United Arab Emirates

Threat: A potential source of loss, harm or disruption. [68]



United Kingdom (UK)

Threat is the intent and capacity to cause loss of life or create adverse consequences to human welfare (including property and the supply of essential services and commodities), the environment or security. [69]


Threat: A potential cause of an incident or hazardous situation that may result in harm to an asset, person, system or organization. [70]


United States

DHS
A natural or manmade occurrence, individual, entity, or action that has or indicates the potential to harm life, information, operations, the environment, and/or property. [71]
NIST
Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access,destruction, disclosure, modification of information, and/or denial of service. [72]


Advanced Persistent Threat (APT): An adversary that possesses sophisticated levels of expertise and significant resources which allow it to create opportunities to achieve its objectives by using multiple attack vectors (e.g., cyber, physical, and deception). [73]

These objectives typically include establishing and extending footholds within the information technology infrastructure of the targeted organizations for purposes of exfiltrating information, undermining or impeding critical aspects of a mission, program, or organization; or positioning itself to carry out these objectives in the future. The advanced persistent threat: (i) pursues its objectives repeatedly over an extended period of time; (ii) adapts to defenders’ efforts to resist it; and (iii) is determined to maintain the level of interaction needed to execute its objectives.

US-CERT
Threat: The combination of a vulnerability, a threat actor, a motive (if the threat actor is a person or persons), and the potential to produce a harmful outcome for the organization. [74]


Uruguay

Amenaza: Causa potencial de un incidente indeseado que puede dar lugar a la perdida de la seguridad de la información. [75]



Venezuela

Amenaza: Factor externo de riesgo, representado por la potencial ocurrencia de un suceso de origen natural o generado por el ser humano, que puede manifestarse en un lugar especifico, con una intensidad y duración determinada. [76]



Other Definitions

Ontario (Canada)

Threat is a person, thing or event that has the potential to cause harm or damage. [77]

Menace: personne, chose ou événement considéré comme une cause probable de préjudice ou de dommage. [77]


Standard Definitions

IETF

A potential for violation of security, which exists when there is an entity, circumstance, capability, action, or event that could cause harm. [78]



ISA-62443-*

Threat: circumstance or event with the potential to adversely affect operations (including mission, functions, image or reputation), assets, control systems or individuals via unauthorized access, destruction, disclosure, modification of data and/or denial of service. [79]



ISO/PAS 22399:2007

Potential cause of an unwanted incident, which may result in harm to individuals, a system or organization, the environment or the community. [80]


ISO/IEC 27000:2014

Potential cause of an unwanted incident, which may result in harm to a system or organization. [81]


ISO 22300:2012(en)

Potential cause of an unwanted incident, which can result in harm to individuals, a system or organization (2.2.9), the environment or the community. [82]


See also

  1. Hazard
  2. Natural Hazard
  3. Technological Hazard
  4. Vulnerability

Notes

References

  1. Jump up ↑ EC COM(2006) 787 final, Directive of the Council on the identification and designation of European Critical Infrastructure and the assessment of the need to improve their protection, EC, Brussels 12.12.2006.
  2. ↑ Jump up to: 2.0 2.1 European Commission's CBRN Glossary, 2012
  3. Jump up ↑ law and publications EUR-Lex EUR-Lex - 2017/0225 (COD) LEX 1899 - EN
  4. Jump up ↑ ENISA Risk Glossary
  5. Jump up ↑ http://www.ciprnet.eu/
  6. Jump up ↑ IAEA - Nuclear Security Series Glossary Version 1.3 (November 2015)
  7. Jump up ↑ ITU Security in Telecommunications and Information Technology: An overview of issues and the deployment of existing ITU-T Recommendations for secure telecommunications, ITU-T, Geneva (2012) - ITU-T X-800.
  8. Jump up ↑ Sécurité dans les télécommunications et les technologies de l’information: Aperçu des problèmes et présentation des Recommandations UIT-T existantes sur la sécurité dans les télécommunications, ITU-T, Geneva (2012) - ITU-T X.800.
  9. Jump up ↑ Seguridad de las telecomunicaciones y las tecnologías de la información: Exposición general de asuntos relacionados con la seguridad de las telecomunicaciones y la aplicación de las Recomendaciones vigentes del UIT-T, ITU-T, Geneva (2012) - ITU-T X.800.
  10. Jump up ↑ NATO EAPC(SCEPC) lexicon 2003.
  11. Jump up ↑ EU VITA deliverable.
  12. Jump up ↑ Dokumenti i Politikave për Sigurinë Kibernetike 2015 - 2017
  13. Jump up ↑ Oficina Nacional de Tecnologías de Información ADMINISTRACION PUBLICA NACIONAL Disposición 3/2013 - Apruébase la “Política de Seguridad de la Información Modelo” (2013)
  14. Jump up ↑ Protective Security Policy Framework - Glossary Oct 2017
  15. Jump up ↑ NSW Critical Infrastructure Resilience Strategy Partner, Prepare, Provide (2018)
  16. Jump up ↑ RADNA VERZIJA OSOBLJA KOMISIJE: Procjena rizika i mapiranje smernice za upravljanje katastrofama
  17. Jump up ↑ GUIA DE REFERÊNCIA PARA A SEGURANÇA DAS INFRAESTRUTURAS CRÍTICAS DA INFORMAÇÃO Versão 01 (Nov. 2010)
  18. Jump up ↑ CIRT-BF Glossary
  19. Jump up ↑ An Emergency Management Framework for Canada (Second Edition)
  20. Jump up ↑ Vocabulaire de la gestion des urgencies/Emergency Management Emergency Management Vocabulary 281 (2012)
  21. Jump up ↑ Lineamientos de política para ciberseguridad y ciberdefensa (2011)
  22. Jump up ↑ Výkladový slovník kybernetické bezpečnosti (2013)
  23. Jump up ↑ Cyber Security Explanatory Glossary (2013)
  24. Jump up ↑ Glossary of the National Telecom Authority (NTA), Egypt
  25. Jump up ↑ (Draft) Ley de ciberseguridad
  26. Jump up ↑ Glosario de Riesgo, Ministerio de Medio Ambiente y Recursos Naturales, El Salvador
  27. Jump up ↑ Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)
  28. Jump up ↑ INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J
  29. Jump up ↑ Méthode de classification et mesures principales, ANSSI (2014)
  30. Jump up ↑ Classification Method and Key Measures, ANSSI (2014)
  31. Jump up ↑ Glossar und Begriffsdefinitionen BSI
  32. Jump up ↑ Glossar BBK
  33. Jump up ↑ Plan Estratégico de Seguridad de la Nación 2016-2020, Guatemala
  34. Jump up ↑ PLAN NACIONAL DE GESTIÓN INTEGRAL DEL RIESGO POR LA TEMPORADA DE DESCENSO DE TEMPERATURA EN LA REPÚBLICA DE GUATEMALA 2015-2016, Guatemala
  35. Jump up ↑ LIVRE BLANC SUR LA SÉCURITÉ ET LA DÉFENSE NATIONALE POUR LE DÉVELOPPEMENT ÉCONOMIQUE ET SOCIAL DURABLE D’HAÏTI, Juin 2015
  36. Jump up ↑ Glossary for Information Security Terms/資訊保安詞彙表
  37. Jump up ↑ India's DGQA Cyber Security Policy (2015)
  38. Jump up ↑ RFC2828 (Japanese translation)
  39. Jump up ↑ Developing National Information Security Strategy for the Kingdom of Saudi Arabia NISS draft 7
  40. Jump up ↑ Lebanon Cyber Security Strategy v2
  41. Jump up ↑ Estragia Nacional de Ciberseguridad (November 2017)
  42. Jump up ↑ El Glosario Centro Nacional de prevencion de desastres (CENAPRED)
  43. Jump up ↑ DIRECTIVE NATIONALE DE LA SECURITE DES SYSTEMES D'INFORMATION, Marocco 2013
  44. Jump up ↑ Cyber Security Beeld Nederland 2020
  45. Jump up ↑ Zakboekje Preventie Cybercrime (2008
  46. Jump up ↑ NCSC, Cyber Security Beeld Nederland 5 (2015)
  47. Jump up ↑ Cyber Security Beeld Nederland 2020
  48. Jump up ↑ Handreiking Cybercrime (2012)
  49. Jump up ↑ DE APROBACIÓN DE LA “ESTRATEGIA NACIONAL DE CIBERSEGURIDAD 2020-2025” (asamblea.gob.ni)
  50. Jump up ↑ Nasjonal strategi for informasjonssikkerhet (2012)
  51. Jump up ↑ Cyber Security Strategy for Norway (2012)
  52. Jump up ↑ Oman CERT Glossary
  53. Jump up ↑ Philippine National Cyber Security Plan 2005
  54. Jump up ↑ DND GLOSSARY OF CYBER SECURITY TERMS (v.4)
  55. Jump up ↑ DND GLOSSARY OF CYBER SECURITY TERMS (v.4)
  56. Jump up ↑ NHS Cyber security glossary
  57. Jump up ↑ U S TAWA z dnia o krajowym systemie cyberbezpieczeństwa / Polish (draft) law on the national cybersecurity system (2018)
  58. Jump up ↑ Glossário Centro National de Cibersegurança Portugal
  59. Jump up ↑ Quadro Nacional de Referência para a Cibersegurança
  60. Jump up ↑ Comprehensive Disaster Management Policy Framework for Trinidad and Tobago
  61. Jump up ↑ Singapore Standard SS 540: 2008 on Business Continuity
  62. Jump up ↑ BEZPEČNOSTNÁ RADA SLOVENSKEJ REPUBLIKY
  63. Jump up ↑ Act No. 8 of 2019: Critical Infrastructure Protection Act, 2019
  64. Jump up ↑ CIBERSEGURIDAD. RETOS Y AMENAZAS A LA SEGURIDAD NACIONAL EN EL CIBERESPACIO, MINISTERIO DE DEFENSA (2010)
  65. Jump up ↑ Leitfaden Schutz kritischer Infrastrukturen 2015
  66. Jump up ↑ 2016-2019 UlUSAL SİBER GÜVENLİk STRATEJİSİ (Sept. 2016)
  67. Jump up ↑ Turkey's National Cyber Security Strategy 2016-2019 (2016)
  68. Jump up ↑ Abu Dhabi Safety and Security Planning Manual
  69. Jump up ↑ Glossary - Revision to Emergency Preparedness, Cabinet Office (2012)
  70. Jump up ↑ Code of Practice Cyber Security for Ships, DSTL (2017)
  71. Jump up ↑ DHS Risk Lexicon 2010 Edition, September 2010
  72. Jump up ↑ NISTIR 7298 rev 2: Glossary of Key Information Security Terms, May 2013/NIST SP 800 series
  73. Jump up ↑ NIST Special Publication 800-53 Rev 4: Security and Privacy Controls for Federal Information Systems and Organizations (April 2013)
  74. Jump up ↑ Cyber Resilience Review (CRR): Method Description and Self-Assessment User Guide (2016)
  75. Jump up ↑ Glossary CERTuy
  76. Jump up ↑ GLOSARIO DE TÉRMINOS EDUCACIÓN Y SEGURIDAD VÍAL
  77. ↑ Jump up to: 77.0 77.1 Province of Ontario’s Emergency Management Glossary of Terms
  78. Jump up ↑ IETF RFC449 Internet Security Glossary 2
  79. Jump up ↑ ISA-62443 series
  80. Jump up ↑ ISO/PAS 22399:2007 Societal security - Guideline for incident preparedness and operational continuity management.
  81. Jump up ↑ ISO/IEC 27000:2014, Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary
  82. Jump up ↑ ISO 22300:2012(en) Societal security — Terminology


Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Threat&oldid=13287"