Identifying the Threats

Once the assets to be protected are identified, it’s necessary to identify and assess the threats to those assets. As you saw earlier in this chapter, different names and levels of detail can be applied to these security threats, but, generally, they break down to the following:

• Reconnaissance

• Unauthorized access

• Data manipulation

• Denial of service