I've been working on some security engineering problems and there is no solution provided so if someone can clarify, would be great.
From the point of view of security engineering, which is not a potential threat?
- Users denying that they modified electronic assets in the organization.
- An earthquake.
- A person disclosing secrets to third parties, after such person has signed a non-disclosure agreement intended to protect these secrets.
- A person accidentally disconnecting the electricity of a computer server.
- Users not following proper procedures to update electronic assets in the organization
Now for this question I am getting #1, simply because I wouldn't classify a denial of modified assets a threat, that would just fall in the Integrity portion of security properties.
Can someone clarify that this is indeed #1?
Thank you to everyone.