What are the main categories of risk assessments in FFIEC CAT?

The FFIEC CAT, or Cybersecurity Assessment Tool, categorizes risks into three main categories: inherent risk, cybersecurity maturity, and impact. Inherent risk refers to the level of risk present in an organization's environment before any mitigating controls are in place. Cybersecurity maturity evaluates an organization's cybersecurity capabilities and their effectiveness in managing and mitigating risks. Impact assesses the potential harm that could result from a successful cyber attack. By assessing risks in these categories, organizations can better understand their cybersecurity posture and prioritize resources to address vulnerabilities and threats.

This mind map was published on 1 April 2024 and has been viewed 112 times.