Match each threat surface component to the description that best characterizes it: Components: 1. Internet of Things (IoT) device 2. Remote employee access 3. Sensitive personal data Descriptions: A. External pathways enabling off-site staff to connect to internal company systems B. Network-connected hardware that often lacks robust built-in security controls C. Private user records that increase individual risk and organizational liability if exposed

### The pairs | Item | Matches | Why | |---|---|---| | Internet of Things device | Connected technology that may have weaker built-in security | Connected devices can expose systems to attack, and some may not have the same security protections as other devices. | | Remote employee access | A way an organization's systems may be reached from outside its usual work locations | Remote work changes where connections originate and requires security for off-site access. | | Personal information shared with online services | Information whose exposure can increase an individual's risk | The more personal or financial information shared, the more information could be exposed in a breach. | ### Terms - **Internet of Things device**: A physical device connected to the Internet or another network. - **Threat surface**: The systems, information, and processes an attacker could target or use. ### Remember The threat surface includes people and information as well as connected equipment.