Stage 1 · Lesson 2 of 8
Risk, threats and vulnerabilities
A is a weakness, such as a server that has missed its updates or a password that is easy to guess. A threat is someone or something that could take advantage of that weakness. Risk puts the two together: how likely is it to happen, and how bad would the result be?
This is often called likelihood and impact. Security teams can never fix everything, so they rank risks and spend effort where both are highest. Frameworks such as the give organisations a shared structure for this work.
such as CVSS help rank single weaknesses on a scale from 0 to 10. Because no single fix is perfect, teams also stack several layers of protection, which is called . Thinking in risk is what separates a useful security person from a noisy one.
Common traptreating every finding as critical, which makes people stop listening to you.
A question to check yourself, an AI practice session and 3 cheat sheet entries come with the full roadmap. Unlock
Resources for this stage
Start with· follow one of these
- CourseFreeProfessor Messer's Security+ (SY0-701) Course
Professor Messer · Beginner
Free video course whose early sections cover general security concepts, threats and cryptography at exactly the right depth
- PlatformFreeTryHackMe
TryHackMe · Beginner
The free pre-security and introductory rooms teach networking, Linux and web basics in guided, browser-based labs