Threat analysis

{
  "id": "MLC-T-CYB-004321",
  "term": "Threat analysis",
  "field": "Cybersecurity",
  "definition": "1. Formal description and evaluation of threat to a system or organization.\n\n2. Process of formally evaluating the degree of threat to an information system or enterprise and describing the nature of the threat.\n\n3. Formal description and evaluation of threat to an information system.\n\n4. See threat assessment.\n\n5. The examination of threat sources against system vulnerabilities to determine the threats for a particular system in a particular operational environment.\n\n6. Assessment to evaluate the actual or potential effect of a threat to a system.\nNote: The threat assessment may include identifying and describing the nature of the threat.",
  "synonyms": [
    "threat assessment"
  ],
  "references": [
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-53 Rev. 5 (adapted)",
    "CNSSI 4009-2015",
    "NIST SP 800-53 Rev. 5 from CNSSI 4009-2015, CNSSI 4009-2022; NIST SP 800-53A Rev. 5 from CNSSI 4009-2015, CNSSI 4009-2022",
    "NIST SP 800-33 [Withdrawn]; NIST SP 800-27 Rev. A [Withdrawn]",
    "NIST SP 800-160 Vol. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/threat-analysis/"
}