# data[].attributes.body
In computer security, a vulnerability is a weakness which can be exploited by a Threat Actor, such as an attacker, to perform unauthorised actions within a computer system. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness. In this frame, vulnerability is also known as the attack surface.

https://en.wikipedia.org/wiki/Vulnerability_(computing)

# data[].attributes.body
Is a term used to describe the process by which an organization handles a data breach or cyberattack, including the way the organization attempts to manage the consequences of the attack or breach (the “incident”).

https://digitalguardian.com/blog/what-incident-response

# data[].attributes.body
Definition – Least privilege is the concept of restricting the access to certain users and accounts. The user must have a certain type of authorization to access different functions inside the application.
Example – somebody who has signed up to a free trial for some software will only get access to a small amount of functions so that they can get a taste for the software and once they purchase the full version they will get authorized and have access to all the functions they are promised.

# data[].attributes.body
Definition – Multiple defensive lines or fortifications to make many steps into hacking into the server or application.
Example – In a fortress there will be an outer wall and multiple walls and soldiers before they can get to the palace. This should be the same for web and app security. When a hacker is trying to hack into a web page or database they should not have access to all the data in the database after breaking through the first wall of security. There should be multiple types of security in it so that it is very hard and time consuming for the hacker to break through all of them before the company finds out and has time to fix the problem.

# data[].attributes.body
Definition – The information on the application must be corrected and trusted. Integrity includes making sure that all the data is correct inside the application as decisions and code will rely on the information. If the information is tampered with then it is a breach in the integrity of the application.
Example – if someone was able to hack a website and change the content of the webpage this would be a breach in the integrity of the webpage.

# data[].attributes.body
Definition – The protection of a person, building, organization or country against attacks or crime.
Example – A web application needs good security in order to keep data safe from attackers trying to steal it. To do this the web application would have things like authorization for logins and designating different entities different functions that they need to use

# data[].attributes.body
In the context of computer security, threat refers to anything that has the potential to cause serious harm to a person's computer system. It is something that may or may not happen, but has the capacity to cause serious damage.

(c) Techopedia
https://www.techopedia.com/definition/25263/threat

Example: threats from virus attacks

# data[].attributes.body
ISMS or Information Security Management System is a set of frameworks that contain policies and procedures for tackling security risks in an organization. The focus of an ISMS is to ensure business continuity by minimizing all security risks to information assets and limiting security breach impacts to a bare minimum.

(c) Techopedia
https://www.techopedia.com/definition/16515/information-security-management-system-isms

# data[].attributes.body
This is simply giving permission or approval. This usually happens when a person needs to sign a certain document, authorizing that he/she has read the document, and is giving his/her approval. It may also be in a form of writing a letter, authorizing a certain person to act on his/her behalf.

# data[].attributes.body
This is the act of making certain information available only to the parties involved. No other people are allowed to know what the information contains.

Example: keeping a client's files in a place with a password or lock.

# data[].attributes.body
A security incident in which sensitive, protected and/or confidential data has been stolen by an unauthorised personnel.

# data[].attributes.body
The act of being protected against criminal or unauthorised use of electronic material/data.

# data[].attributes.body
A path or means by which a hacker gains access to a computer or network server in order to deliver a payload or malicious outcome. Attack vectors enable hackers to exploit system vulnerabilities, including the human element.

https://searchsecurity.techtarget.com/definition/attack-vector

# data[].attributes.body
Any situation that involves danger or loss. Risk is pretty much present in our everyday lives. Although it depends on certain circumstances, every time a person makes a decision or decides to do a certain action, risk is always connected to it.

Example: developing a new software. Chances are, it won't be saleable to the public or it won't be approved.