Difference between revisions of "Threat"

From CIPedia
Jump to navigation Jump to search
(Standard Definitions)
(Czech Republic)
Line 20: Line 20:
  
 
=== National Definitions ===
 
=== National Definitions ===
 +
==== Canada ====
 +
{{definition| Threat is the presence of a hazard and an exposure pathway.  <ref> [http://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/mrgnc-mngmnt-frmwrk/index-eng.aspx An Emergency Management Framework for Canada (Second Edition) </ref>}}
 +
Threats may be natural or human-induced, either accidental or intentional.<br />
 +
 
====Czech Republic====
 
====Czech Republic====
 
{{definition|Potential cause of an unwanted incident which may result in damage to a system or organization (Potenciální příčina nechtěného incidentu, jehož výsledkem může být poškození systému nebo organizace.).<ref> [http://www.govcert.cz/download/nodeid-3555/ Cyber Security Explanatory Glossary (2013)]</ref>}}
 
{{definition|Potential cause of an unwanted incident which may result in damage to a system or organization (Potenciální příčina nechtěného incidentu, jehož výsledkem může být poškození systému nebo organizace.).<ref> [http://www.govcert.cz/download/nodeid-3555/ Cyber Security Explanatory Glossary (2013)]</ref>}}
<br />  
+
<br />
 +
 
 
==== France ====
 
==== France ====
 
{{definition|(in French) Menace: tout événement physique, phénomène ou activité humaine potentiellement préjudiciable, susceptible de provoquer des décès ou des lésions corporelles, des dégâts matériels ou immatériels, des perturbations sociales et économiques ou une détérioration de l’environnement. Pour la démarche de sécurité des secteurs d’activités d’importance vitale, les menaces seront réputées avoir un caractère malveillant ou être de nature terroriste <ref>[http://circulaire.legifrance.gouv.fr/pdf/2014/01/cir_37828.pdf INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J] </ref>.}}
 
{{definition|(in French) Menace: tout événement physique, phénomène ou activité humaine potentiellement préjudiciable, susceptible de provoquer des décès ou des lésions corporelles, des dégâts matériels ou immatériels, des perturbations sociales et économiques ou une détérioration de l’environnement. Pour la démarche de sécurité des secteurs d’activités d’importance vitale, les menaces seront réputées avoir un caractère malveillant ou être de nature terroriste <ref>[http://circulaire.legifrance.gouv.fr/pdf/2014/01/cir_37828.pdf INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J] </ref>.}}

Revision as of 02:50, 24 May 2015

The definitions of "Threat" and "Hazard" are very similar, so maybe the terms do not need to be distinguished. A CI-specific usage example for the above terms can be found on the "Hazard" entry.

Definitions

European Definitions

Any indication, circumstance, or event with the potential to disrupt or destroy CI, or any element thereof. [1]

The European Commission's CBRN Glossary[2] defines threat as

The likelihood of occurrence of a hazard or event with a harmful effect. In contrast to risk, a threat is not related to the impact it may cause. In the context of public health, a threat is defined as a substance, condition or event, which by its presence has the potential to rapidly harm an exposed population, sufficiently lead to a major crisis[2].


Other International Definitions

NATO CEP / EAPC

A threat is any event that has the potential to disrupt or destroy critical infrastructure, or any element thereof. [3].

An Αll Ηazards approach to threat includes accidents, natural hazards as well as deliberate attacks.

EU Project VITA

A threat is a source of impending danger or harm. [4].

The semantics of that definition in the context of CI is that a threat to a CI may give rise to serious consequences to critical societal functions, including the supply chain, health, safety, security, economic or social well-being of people.

National Definitions

Canada

Threat is the presence of a hazard and an exposure pathway. [5]

Threats may be natural or human-induced, either accidental or intentional.

Czech Republic

Potential cause of an unwanted incident which may result in damage to a system or organization (Potenciální příčina nechtěného incidentu, jehož výsledkem může být poškození systému nebo organizace.).[6]


France

(in French) Menace: tout événement physique, phénomène ou activité humaine potentiellement préjudiciable, susceptible de provoquer des décès ou des lésions corporelles, des dégâts matériels ou immatériels, des perturbations sociales et économiques ou une détérioration de l’environnement. Pour la démarche de sécurité des secteurs d’activités d’importance vitale, les menaces seront réputées avoir un caractère malveillant ou être de nature terroriste [7].

A non-official translation is the following:

Any physical event, phenomenon or human activities potentially harmful, that could cause death or injuries, material or immaterial damage, social and economic disruption or environmental degradation. Meant for a security approach of vital activity sectors (CI-sectors), threats will be considered as having a malicious character or as terrorist activities.


Kingdom of Saudi Arabia

Threat is an agent that exploits security vulnerabilities and risks.[8]


United States

DHS
A natural or manmade occurrence, individual, entity, or action that has or indicates the potential to harm life, information, operations, the environment, and/or property [9].
NIST
Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access,destruction, disclosure, modification of information, and/or denial of service.[10]



Other Definitions

Ontario (Canada)

Threat is a person, thing or event that has the potential to cause harm or damage.[11]


Menace: personne, chose ou événement considéré comme une cause probable de préjudice ou de dommage. [12]


Standard Definitions

ISO/PAS 22399:2007

Potential cause of an unwanted incident, which may result in harm to individuals, a system or organization, the environment or the community [13].

ISO/IEC 27000:2014

Potential cause of an unwanted incident, which may result in harm to a system or organization [14].


See also

Notes