A Risk Assessment Excercise in multiple parts: Threats

Continuing my risk assessment from last post, I'd like first to report a missing item or three from the previous list of assets being protected:

• The USB device itself (duh).
• Other data on that device (personal or otherwise).
• Anything that device could connect to

Having identified what needs protection, now we need to look at what we are protecting it from:

• Theft
• Damage (e.g., electrical hardware damage)
• Data Corruption
• Loss of sensitive information
• Exposure of sensitive information
• Infection by malware (virus, trojan, ransomware, other)
• Denial of Service

There are a number of downstream consequences that might result from these core threats, but these threats get at most of the root causes.  I'll look at various potential mitigations for these issues next week.