Threat

{
  "id": "MLC-T-CYB-004319",
  "term": "Threat",
  "field": "Cybersecurity",
  "definition": "1. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. Also, the potential for a threat-source to successfully exploit a particular information system vulnerability.\n\n2. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.\n\n3. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, or modification of information, and/or denial of service.\n\n4. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation through a system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.\n\n5. Any circumstance or event with the potential to adversely impact organizational operations, organizational assets, individuals, other organizations, or the Nation through a system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.\n\n6. A possible danger to a computer system, which may result in the interception, alteration, obstruction, or destruction of computational resources, or other disruption to the system.\n\n7. Any circumstance or event with the potential to adversely impact operations (including mission function, image, or reputation), agency assets or individuals through an information system via unauthorized access, destruction, disclosure, modification of data, and/or denial of service.\n\n8. An event or condition that has the potential for causing asset loss and the undesirable consequences or impact from such loss.\n\n9. Any circumstance or event with the potential to adversely impact agency operations (including mission, functions, image, or reputation), agency assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.\n\n10. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. Also, the potential for a threat source to successfully exploit a particular information system vulnerability.\n\n11. Any circumstance or event with the potential to adversely impact organizational operations and assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, or modification of information, and/or denial of service.\n\n12. Potential cause of unacceptable asset loss and the undesirable consequences or impact of such a loss.\n\n13. Any circumstance or event with the potential to adversely impact agency operations (including safety, mission, functions, image, or reputation), agency assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service.\n\n14. Any circumstance or event with the potential to adversely impact organizational operations.\n\n15. potential cause of an unwanted incident, which may result in harm to a system or organization\n\n16. Any circumstance or event with the potential to cause the security of the system to be compromised.\n\n17. the likelihood or frequency of a harmful event occurring\n\n18. Any circumstance or event with the potential to adversely impact organizational operations (a negative risk).\n\n19. Any circumstance or event with the potential to adversely impact organizational operations, organizational assets, individuals, other organizations, or the Nation through a system via unauthorized access, destruction, disclosure, modification of information, or denial of service.\n\n20. Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service; the potential for a threat source to successfully exploit a particular information system vulnerability.",
  "synonyms": [
    "Cyber Threat",
    "negative risk"
  ],
  "references": [
    "FIPS 200; NIST SP 1800-15B from FIPS 200",
    "NIST SP 800-128; NIST SP 800-137; NIST SP 800-39; NISTIR 7621 Rev. 1; NISTIR 7622; NISTIR 8170",
    "NIST SP 1800-21B from NIST SP 800-30 Rev. 1; NIST SP 800-150 from NIST SP 800-30 Rev. 1; NIST SP 800-30 Rev. 1; NIST SP 800-61r3 from NIST SP 800-30 Rev. 1",
    "NIST SP 800-12 Rev. 1",
    "NIST SP 800-128; NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-53 Rev. 5; NIST SP 800-171r3 from NIST SP 800-30 Rev. 1; NIST SP 800-172r3 from 44 U.S.C., Sec. 3552; NIST SP 800-37 Rev. 2 from NIST SP 800-30 Rev. 1; NIST SP 800-53 Rev. 5 from NIST SP 800-30 Rev. 1; NIST SP 800-53A Rev. 5 from NIST SP 800-30 Rev. 1",
    "NIST SP 800-28 Version 2",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 1800-17b",
    "NIST SP 800-60 Vol. 1 Rev. 1; NIST SP 800-60 Vol. 2 Rev. 1",
    "NIST SP 1800-15C from FIPS 200",
    "NIST SP 1800-30B from NIST SP 800-30 Rev. 1 (adapted)",
    "NIST SP 800-160v1r1",
    "NIST SP 800-82r3 from FIPS 200 (adapted)",
    "NIST SP 800-221",
    "NISTIR 8053",
    "NISTIR 4734",
    "NISTIR 7435",
    "NISTIR 8286",
    "NIST IR 8323r1 from NIST SP 800-53 Rev. 5; NIST IR 8401 from NIST SP 800-53 Rev. 5 (adapted); NIST IR 8441 from NIST SP 800-53 Rev. 5",
    "NIST IR 8270",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/threat/"
}