threat source

{
  "id": "MLC-T-CYB-004333",
  "term": "threat source",
  "field": "Cybersecurity",
  "definition": "1. The intent and method targeted at the intentional exploitation of a vulnerability or a situation and method that may accidentally trigger a vulnerability. Synonymous with Threat Agent.\n\n2. The intent and method targeted at the intentional exploitation of a vulnerability or a situation and method that may accidentally trigger a vulnerability.\n\n3. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, or modification of information, and/or denial of service.\n\n4. The intent and method targeted at the intentional exploitation of a vulnerability or a situation and method that may accidentally trigger a vulnerability. See threat agent.\n\n5. A malicious person with harmful intent or an unintended or unavoidable situation (such as a natural disaster, technical failure, or human error) that may trigger a vulnerability.",
  "synonyms": [
    "threat agent"
  ],
  "references": [
    "FIPS 200; NIST SP 1800-21B; NIST SP 800-128 from FIPS 200; NIST SP 800-128 from FIPS 200; NIST SP 800-137 from FIPS 200",
    "NIST SP 800-30 Rev. 1; NIST SP 800-39; NIST SP 800-82r3 from FIPS 200; NISTIR 7622; NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-53 Rev. 5",
    "NIST SP 800-160 Vol. 2 Rev. 1 from CNSSI 4009-2022",
    "NIST SP 800-37 Rev. 2 from FIPS 200; NIST SP 800-53 Rev. 5 from FIPS 200; NIST SP 800-53A Rev. 5 from FIPS 200",
    "NISTIR 8286",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/threat-source/"
}