inch-1----Page:11
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
|
Impact + Damage -> Impact 2.1.4. Damage: An intended or unintended consequence of an attack which affects the normal operation of the targeted system or service. Description of damage may include free text description of actual result of attack, and, where possible, structured information about the particular damaged system, subsystem or service. 2.1.7. Impact: Impact describes result of attack expressed in terms of user community, for example the cost in terms of financial or other disruption Recommended to combine Damage and Impact into the term "Impact", which is what is being described by the current term "damage". Impact can be extensible and may be defined with terms such as financial, asset, information, organization, etc. INCH Meeting recommendation – Impact and Damage are different |