From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Threat modeling
From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management
Threat modeling
- [Instructor] Threat modeling is an important part of the risk management process. It provides valuable information about the threats facing an organization and the attack types that those threats might engage in. As the organization identifies vulnerabilities to threats, it should continue to evolve its controls. Let's take a look at the technology and process remediation that should accompany threat modeling efforts. As we approach threat modeling, we should consider several important factors. First, we must look at the capabilities of our adversaries. By understanding the sophistication and tools available to potential attackers, we can better understand how those attackers might approach our organizations in a malicious manner. Next, we must understand both our total attack surface, and potential attack vectors. In the previous video, I discussed how we can use those two key characteristics to understand the types of…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.