IT Examiner School eBook

Internal Use Only

Inherent Risk Profile: Organizational Characteristics

• Mergers and acquisitions • Direct employees and contractors • IT Environment • Business presence & locations • Operations & Data centers

Internal Use Only

Inherent Risk Profile: External Threats

Threat Actors

Motivation

• Nation-States • Professional Cyber Criminals • Hacktivist • Terrorist Groups • Thrill-Seekers • *Insider Threats

• Geopolitical • Profit • Ideological Criminals • Satisfaction • *Discontent, Profit