$4\mathrm{.}1$ Introduction to Information Security

Your ClO has asked you to produce a brief for the Unix team detailing the amount of social security numbers and other personal health information that could be disclosed if the company's systems were attacked and data exfiltrated successfully by hackers. Which of the following briefs would be BEST to give, and why?

Exposure brief since it displays the loss or damage that can result if a threat compromises that resource

Risk brief since it details the exposures, vulnerabilities, threats, and a plethora of important information around the systems Vulnerability brief since it displays the possibility and avenues a threat can leverage

Threat brief since it will display the dangers to the system posed by the hackers