Great.
So now let's talk about impact, what is an impact now?
Impact is something that can cause harm to an organization or that has actually caused the damage to
an organization, for example, after we saw earlier about the relationship between the one that would
be affected and if that threat is exploited or if that one is exploited, then there's an impact on
the organization, which means that there are three types of impact systems can take place.
The impact can be on the confidentiality of system.
The impact can be on the integrity of the system, and the impact can be on the availability of information
security.
So when it comes to confidentiality, invasion of privacy of customers or users and employees, for
example, if that is unencrypted data, that is a vulnerability.
So the theft is information.
So the threat is information theft.
Right.
We had seen in the last lecture and therefore that that vulnerability is exploited, then the impact
is invasion of privacy of the customers, users and employees.
Well, confidential information leakage and information theft is also an impact on the confidentiality
of information security.
Then integrity, accidental change of data, deliberate change, intentional change, intentional threat.
We have seen then incorrect results and loss of data is also impact on integrity and finally, availability,
performance, degradation of the system.
If the if that is a direct attack on the system, then the data might not be available to the customers
or the users then and when it is needed.
So that can result in the performance, degradation, service, interruption and availability of service.
Again, DOS attack and disruption of the organizations.
So I hope these are the things that you should understand, impact on confidentiality, impact on integrity
and impact on availability.
Now, here is a formula on your screen track, plus one that is equal to risk of the impact.
So what is a threat is a new incident with a potential harm to a system we have seen.
And what is it when the liberty is known, weakness that hackers could exploit, which is equal to risk?
Now, do not consider this as a mathematical operation.
This plus side here do not consider this as a mathematical operation.
Just make sure that when tracked at the combine, they have the potential risk on the system.
Make sure that you remember this formula.
It is very important in order to calculate the risk, we are going to see how to calculate the risks
and the cost of the risk or the failures of the system in our next sections.
But for the time being, make sure that you understand threat and when, when combined can result in
do the risk, which is nothing but the potential for damage and a threat.
Exploit even the.
But the examples of correct can be impact, can be financial losses, loss of assets, loss of customers
and suppliers, lawsuits and penalties, loss of competitive advantage, service interruption, inability
to provide service, loss of branding or reputation and disruption of operations are some examples of
impact.
I hope you've understood this lecture.
I hope you have understood the definition of impact and what actually impact means in the next lecture.
We talk about different security controls and we also define what actually information security risk
is.
I will see you in the next lecture.