Control Risk: The likelihood that the design or operational effectiveness of controls may not prevent, detect, or correct errors or fraud. In information security, it pertains to the risk of failure or inadequacy of security measures, which may lead to data breaches or other incidents compromising the confidentiality, integrity, and availability of information. It is assessed based on the potential impact on the organization’s business and systems.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index