Information system-related security risks

{
  "id": "MLC-T-CYB-002142",
  "term": "Information system-related security risks",
  "field": "Cybersecurity",
  "definition": "1. The level of impact on organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals resulting from the operation of an information system given the potential impact of a threat and the likelihood of that threat occurring.\n\n2. A measure of the extent to which an entity is threatened by a potential circumstance or event, and typically a function of: (i) the adverse impacts that would arise if the circumstance or event occurs; and (ii) the likelihood of occurrence.\n\n3. Risk that arises through the loss of confidentiality, integrity, or availability of information or information systems considering impacts to organizational operations and assets, individuals, other organizations, and the Nation.\n\n4. Risk that arises through the loss of confidentiality, integrity, or availability of information or information systems considering impacts to organizational operations and assets, individuals, other organizations, and the Nation. A subset of information security risk. See risk.\n\n5. Information system-related security risks are those risks that arise through the loss of confidentiality, integrity, or availability of information or information systems and consider impacts to the organization (including assets, mission, functions, image, or reputation), individuals, other organizations, and the Nation.\nSee Risk.\n\n6. Risks that arise through the loss of confidentiality, integrity, or availability of information or information systems and consider impacts to the organization (including assets, mission, functions, image, or reputation), individuals, other organizations, and the Nation.See Risk.\n\n7. Risks that arise through the loss of confidentiality, integrity, or availability of information or information systems and that considers impacts to the organization (including assets, mission, functions, image, or reputation), individuals, other organizations, and the Nation. See Risk.\n\n8. Information system-related security risks are those risks that arise through the loss of confidentiality, integrity, or availability of information or information systems and consider impacts to the organization (including assets, mission, functions, image, or reputation), individuals, other organizations, and the Nation. See Risk.\n\n9. Risks that arise through the loss of confidentiality, integrity, or availability of information or information systems and consider impacts to the organization (including assets, mission, functions, image, or reputation), individuals, other organizations, and the Nation. See Risk.",
  "abbreviation": "Risk",
  "see_also": [
    "risk"
  ],
  "references": [
    "NIST SP 1800-25B from FIPS 200; NIST SP 1800-26B from FIPS 200; NIST SP 1800-10B from FIPS 200",
    "NIST SP 800-30 Rev. 1 from CNSSI 4009-2010; NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-39",
    "NIST SP 800-30 Rev. 1",
    "CNSSI 4009-2015 from NIST SP 800-30 Rev. 1",
    "NIST SP 800-37 Rev. 1 [Superseded]",
    "NIST SP 800-39",
    "NIST SP 800-53 Rev. 4 [Superseded]",
    "NIST SP 800-53A Rev. 4 [Superseded]",
    "NIST SP 800-137",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-system-related-security-risks/"
}