IT Examiner School - Oct 2023

Internal Use Only

Inherent Risk Profile: Organizational Characteristics

• Mergers and acquisitions • Direct employees and contractors • IT Environment • Business presence & locations • Operations & Data centers

11

Internal Use Only

Inherent Risk Profile: External Threats

Threat Actors

Motivation

• Nation ‐ States • Professional Cyber Criminals • Hacktivist • Terrorist Groups • Thrill ‐ Seekers • *Insider Threats

• Geopolitical • Profit • Ideological Criminals • Satisfaction • *Discontent, Profit

12