Capacities
Capacities are the strengths and resources a group or defender can access to achieve a reasonable degree of security. Examples of capacities could be training in security or legal issues, a group working together as a team, access to a phone and safe transportation, to good networks of defenders, to a proper way of dealing with fear, etc.
- In most cases,
- vulnerabilities and
- capacities are two sides of
- the same coin.
For example:
Not knowing enough about your work environment work is a vulnerability, while having this knowledge is a capacity. The same can be said about having or not access to safe transportation or to good networks of defenders.
(There is a combined check-list of possible vulnerabilities and capacities at the end of this chapter).
The risk created by threats and vulnerabilities can be reduced if defenders have enough capacities (the more capacities, the lesser the risk).
Risk = threats x vulnerability / capacities