AP Cybersecurity 2.1 Risk = Threat × Vulnerability: The Defender's Framework

A lemonade stand guarded like a bank vault. A bank vault guarded by a sleepy dog. One of these security plans is insane — and there's a formula that tells you which. In 9 minutes: the defender's complete decision framework — how to assess risk, the four ways to handle it, every type of security control, and why layered defense wins. In this video you'll learn: The risk formula: threat exploits vulnerability against an asset (in plain English) Likelihood × severity: the two factors and what drives each Quantitative vs qualitative risk ratings (a different ruler, not a weaker one) The 4 risk responses: avoid, transfer, mitigate, accept — plus residual risk The CIA triad and the 3×2 control grid: physical/technical/managerial × preventative/detective/corrective Defense in depth: why layers beat any single control 3 original practice scenarios + the AP trap: cameras are detective, not preventative Timestamps: 0:00 The lemonade stand vs the bank vault 0:10 What you'll be able to do by the end 0:40 Intuition: the lemonade test 1:15 Threat, vulnerability, risk — the official terms 2:00 Likelihood × severity 2:50 Quantitative vs qualitative: two rulers 3:20 Worked example: the Xtensr risk worksheet, filled live 4:35 The four responses: avoid / transfer / mitigate / accept 5:25 Pause and decide: the flood basement 6:00 The 3×2 control grid 7:00 Defense in depth: why layers win 7:50 Check yourself: 3 original scenarios 8:35 The AP trap 9:10 Next: walk the building like an attacker Topic: AP Cybersecurity 2.1 — Cyber Foundations (part B) | Exam skills: Analyze Risk / Mitigate Risk Next video: AP Cybersecurity 2.2 — walk the building like an attacker (drops next — subscribe for it) Full playlist: AP Cybersecurity — Full Course    • AP Cybersecurity   Exam: Wednesday, May 5, 2027 #APCybersecurity #APCyber #RiskAssessment #CyberSecurity #StudyTips