$[$ Choose$]$

Actor takes action to compromise an asset Anything thas processes, stores, or transmits date Actions $+$ actors that may compromise security When actions of an actor compromise an asset Loss incurred when an asset is compromised Loss of confidentiality, integrity, or availability Probability and magnitude of future loss Managing risk to information assets Weakness in asset that can be exploited by threat Policies, practices, technologies to secure assets