ISO IEC 27002 Manager Practice Questions - PECB Certified ISO IEC 27002 Manager Exam

A threat is a potential cause of an incident; a vulnerability is a weakness that can be exploited by a threat; risk is the potential effect on objectives resulting from threats exploiting vulnerabilities A risk exists only when a vulnerability is patched A vulnerability is an external attacker and a threat is an internal weakness Risk, threat, and vulnerability are interchangeable terms in ISO/IEC 27002