Certified Incident Handler (CIH) Practice Ecam

What term is defined as a measure of possible inability to achieve a goal within security, cost, and technical limitations?

1. Threat

2. Vulnerability

3. Risk

4. Hazard

The correct answer is: Risk

The term that describes a measure of possible inability to achieve a goal while considering security, cost, and technical limitations is risk. In the context of information security and incident handling, risk encompasses not only the potential for adverse outcomes but also the challenges and limitations that can hinder the achievement of objectives. By evaluating risk, organizations can assess the likelihood of a negative event occurring and the potential impact it may have on their operations. This nuanced understanding allows for more informed decision-making regarding resource allocation, security measures, and incident response strategies. The other concepts, while related, focus on different aspects. A threat refers to any potential danger that could exploit a vulnerability, which indicates a weakness in a system. A hazard usually implies a source of potential harm or adverse effects; however, it does not explicitly address the contextual factors such as cost and technical limitations as risk does. Thus, the definition most aligned with the parameters outlined in the question is risk.