A formula to determine all the overall effectiveness of a companies security overall defence. It can be evaluated by collecting information by asking common questions, rating the systems security.
Malicious Actors
A person, machine or entity for an event or incident that impacts or has the potential to impact the normal functioning of another entity.
Inventory
up to date list of assets for your organization can be accompanied with additional metadata.
Attack Vectors
the method that a malicious actor uses to breach or infiltrate your network.
Attack Surface
The sum of the Attack Vectors
Security Controls
Controls to safeguard or countermeasures to avoid, detect, counteract, or minimize security risks.