IT Examiner School

Inherent Risk Profile: Organizational Characteristics

• Mergers and acquisitions • Direct employees and contractors • IT Environment • Business presence & locations • Operations & Data centers

Inherent Risk Profile: External Threats

Threat Actors

Motivation

• Nation ‐ States • Professional Cyber Criminals • Hacktivist • Terrorist Groups • Thrill ‐ Seekers • *Insider Threats

• Geopolitical • Profit • Ideological Criminals • Satisfaction • *Discontent, Profit