What is the difference between an asset's ability to generate revenue and its ability to generate profit? How many categories should a data classification scheme include? Why?
How many threat categories are listed in this chapter? Which is noted as being the most frequently encountered, and why?