For this module, assets include information, hardware, and software that reside on and comprise the information technology infrastructure of an organization. Threat is defined here as anything that may compromise an asset. This could be a person, such as an employee or a hacker, or it could be a competitor or anyone else with deliberate intention to compromise an asset. Systematic methods of information security risk analysis and assessment are emerging. These methods help an organization identify important assets, threats against these assets, security requirements for these assets, and weaknesses or vulnerabilities in current practice that increase the likelihood of these assets being compromised.
Monitoring is the observation of data streams for specific events.
Inspection is the examination of a data resource or process. Auditing is the systematic examination of data against documented expectations of form or behavior. One list of such tools is contained in the implementation Identifying tools that aid in detecting signs of intrusion . Copyright 2000 Carnegie Mellon University. See the conditions for use, disclaimers, and copyright information.