Why systems are vulnerable
Hardware problems
Breakdowns, configuration errors, damage from improper use or crime
Software problems
Programming errors, installation errors, unauthorized changes)
Disasters
Power failures, flood, fires, etc.
Use of networks and computers outside of firm’s control
E.g., with domestic or offshore outsourcing vendors