Table 5. Threats and associated controls... | Emerald Publishing

Table 5.

Threats and associated controls

Qualitative values	Threat	Description
Disaster (natural, environmental)	Fire/ explosion/ flood/water damage etc.[…]	Physical and Environmental Protection (NIST SP 800-26) 2-2 Identity and Access Management (ECC-1: 2018) 2-14 Physical Security (ECC-1: 2018)
Physical threats	Fraud	IT system life cycle (NIST SP 800-26) Personnel Security (NIST SP 800-26) Physical and Environmental Protection (NIST SP 800-26) Production, input/output controls (NIST SP 800-26) Security Awareness, Training, and Education (NIST SP 800-26) 1-10 Cybersecurity Awareness and Training Program (ECC-1: 2018) 2-2 Identity and Access Management (ECC-1: 2018) 2-14 Physical Security (ECC −1: 2018)

Qualitative values	Threat	Description
Disaster(natural, environmental)	Fire/ explosion/ flood/water damage etc.[…]	Physical and Environmental Protection (NIST SP 800-26) 2-2 Identity and Access Management (ECC-1: 2018) 2-14 Physical Security (ECC-1: 2018)
Physical threats	Fraud	IT system life cycle (NIST SP 800-26) Personnel Security (NIST SP 800-26) Physical and Environmental Protection (NIST SP 800-26) Production, input/output controls (NIST SP 800-26) Security Awareness, Training, and Education (NIST SP 800-26) 1-10 Cybersecurity Awareness and Training Program (ECC-1: 2018) 2-2 Identity and Access Management (ECC-1: 2018) 2-14 Physical Security (ECC −1: 2018)

Source: Created by authors