7. Making Connections
| Threat Category | Example from Text | CIA Element Impacted |
|---|---|---|
| Human / Social | Password sharing between Joe and Joanne | Confidentiality & Integrity |
| Physical / Remote | Family members using an unlocked work laptop | Integrity & Confidentiality |
| Environmental | Power outages and mechanical generator failure | Availability |
| Accidental | Improper fire suppression methods | Availability & Integrity |
Explaination:
The table above tells about the connections between the type of threat and the CIA Triad.
- First Human/Social: This affects Confidentiality and Integrity of the company, as it can be used by Red Teamers or Black hats to gain trust and get the Username and Password.
- Second Physical/Remote: This is also similar to Human, but in this case, an attacker can install a malware or spyware and remotely access it, from afar.
- Third Environmental: These cases like power outage and environmental failures.
- Fourthly Accidental: These are caused by carelessness, by doing a bad job at not focusing on the quality.
These are the ones mentioned in CC official module, but there are more cases.