FAQ n.46472

All the systems which expose an interface, are connected to the internet, or more in general, are not physically isolated, are likely to be attacked by “hackers”. In light of this, it is of outmost importance for an organization to manage the risk of a cyber-attack. At first by understanding the potential impact and the likelihood of an occurrence and then by implementing controls for the most effective trade-off for security.  In general the higher is the potential impact, the lower shall be the likelihood, so controls implementation effort should be prioritised accordingly.