| informat. |
For the purpose of IT risk management, one of three possible sorts of events: threat event, loss event and vulnerability event (Being able to consistently and effectively differentiate the different types of events that contribute to risk is a critical element in developing good risk-related metrics and well-informed decisions. Unless these categorical differences are recognized and applied, any resulting metrics lose meaning and, as a result, decisions based on those metrics are far more likely to be flawed) |
