Threats and Vulnerabilities:

The threats to the security of systems assets can be broadly divided into nine categories:
(i) Fire,
(ii) Water,
(iii) Energy variations like voltage fluctuations, circuit breakage, etc.,
(iv) Structural damages,
(v) Pollution,
(vi) Intrusion like physical intrusion and eavesdropping which can be eliminated / minimized by physical access controls, prevention of electromagnetic emission and providing the facilities with their proper locations / sites,
(vii) Viruses and Worms (being discussed in detail later on),
(viii) Misuse of software, data and services which can be avoided by preparing an employees’ code of conduct and
(ix) Hackers, the expected loss from whose activities can be mitigated only by robust logical access controls.