Which of the following is NOT a component of a vulnerability chart?
A) Listing assets that are missing
B) Concealment possibilities
C) Internal controls that had to be compromised
D) Identification of the suspected perpetrator

Question

Quizplus · Accepted Answer

The identification of the suspected perpetrator is not a component of a vulnerability chart. Vulnerability charts typically include a listing of assets, potential vulnerabilities or weaknesses, internal controls that have been compromised or are lacking, and possible attack scenarios. The purpose of a vulnerability chart is to identify areas of weakness that need to be addressed to reduce the risk of a successful attack. While identifying a perpetrator may be important for taking legal action after an attack has occurred, it is not directly relevant to identifying and managing vulnerabilities.

Which of the Following Is NOT a Component of a Vulnerability