GB/T 26318-2010Logistics network information systems risk and prevention (English PDF)

3.1 Assets asset

Organization of information or valuable resources, the security policy is to protect the object.

[GB/T 20984-2007, Definition 3.1]

3.2 Asset value

The degree of importance or sensitivity of assets characterization. Is a property asset value of the assets, but also the main elements of asset identification.

[GB/T 20984-2007, 3.2 Definition]

3.3 Threat

It may cause harm to the system or the organization does not want a potential cause of the accident.

[GB/T 20984-2007, the definition 3.17]

3.4 Weak point vulnerability

Asset or group of assets can take advantage of the weaknesses of the threat.

3.5 Risk

Potential possibility of one or a group of weak points specific threats asset utilization, resulting in damage to the assets of that specific threat event occurs

The possibility of combining with the consequences.

3.6 Informationsystemrisk

Specific threats to information assets, vulnerabilities or weaknesses resulting in a potential damage to assets, including information assets from threats and

Body weakness or vulnerability in three components.

Note. the severity of risk information system assets and threats available extent of damage to the product of the probability of occurrence of the measure.

GB/T 46274-2025 | RB/T 033-2020 | GB/T 37595-2019 | GB/T 26320-2010 | GB/T 26319-2010 | GB/T 26317-2010 | […]