Mixing Up Vulnerabilities and Risk
A bike is resting against a lamppost without being locked. Is the bike at risk of being stolen? To answer that question, you’d need to find out: Is the bike valuable? Is it in desirable condition? Who would want the bike? What’s the crime rate by the lamppost? Are people around? Is it daytime? Is there a security camera? Also, what effect would it have if someone were to take the bike?
An unlocked bike resting on a lamppost is not a risk, but, in the words of cybersecurity, it is a vulnerability that might be exploited … [5 min. read]