Zero Day vulnerability is an unlikely threat to face a business. If it did affect the business, it could damage the
business very much because hackers could exploit the vulnerability in order to do damage to the company’s
system. The business would have money lost and their reputation damaged.
Probability: Unlikely Impact: Major Severity: Medium
Operating System vulnerability is an unlikely treat to face businesses that have an up to date OS. However, if a
business is using an unsupported Operating System, the treat can become very likely to affect them. It could
lock users out of the computer, so they are unable to use them. The vulnerability can even be used to ask the
business for a ransom. This would put incredible strain on the business, losing money and possibly equipment
in the process.
Probability: Unlikely Impact: Major Severity: Medium
Phishing is a likely treat to face businesses. A staff member could get an email from their boss that looks
legitimate, but in fact it’s a scammer. If the staff member gives their information to the scammer, they could
use these details to gain access to the businesses system. Here they could steal files and upload viruses.
Causing the business to lose time and spending it on making sure the system is clear from malware.
Probability: Likely Impact: Moderate Severity: Medium
Mobile devices being lost is a likely treat to impact businesses. If a staff member leaves their laptop or phone
in a public area, it could be found and used by people that want to use it for malicious purposes. With the
device, they could access the businesses system and disrupt the function of it. This would reduce the amount
of money they have and cause them to spend more on security.
Probability: Likely Impact: Major Severity: High
Social engineering techniques are a likely threat to organisations. A staff member could be fooled into thinking
a scammer is somebody else. This would lead to the staff member giving information to them that they can
use to damage the business. They could access the organisations files and take confidential data of customers.
This would damage their reputation and customers would lose faith in them.
Probability: Likely Impact: Major Severity: High
business very much because hackers could exploit the vulnerability in order to do damage to the company’s
system. The business would have money lost and their reputation damaged.
Probability: Unlikely Impact: Major Severity: Medium
Operating System vulnerability is an unlikely treat to face businesses that have an up to date OS. However, if a
business is using an unsupported Operating System, the treat can become very likely to affect them. It could
lock users out of the computer, so they are unable to use them. The vulnerability can even be used to ask the
business for a ransom. This would put incredible strain on the business, losing money and possibly equipment
in the process.
Probability: Unlikely Impact: Major Severity: Medium
Phishing is a likely treat to face businesses. A staff member could get an email from their boss that looks
legitimate, but in fact it’s a scammer. If the staff member gives their information to the scammer, they could
use these details to gain access to the businesses system. Here they could steal files and upload viruses.
Causing the business to lose time and spending it on making sure the system is clear from malware.
Probability: Likely Impact: Moderate Severity: Medium
Mobile devices being lost is a likely treat to impact businesses. If a staff member leaves their laptop or phone
in a public area, it could be found and used by people that want to use it for malicious purposes. With the
device, they could access the businesses system and disrupt the function of it. This would reduce the amount
of money they have and cause them to spend more on security.
Probability: Likely Impact: Major Severity: High
Social engineering techniques are a likely threat to organisations. A staff member could be fooled into thinking
a scammer is somebody else. This would lead to the staff member giving information to them that they can
use to damage the business. They could access the organisations files and take confidential data of customers.
This would damage their reputation and customers would lose faith in them.
Probability: Likely Impact: Major Severity: High
