You understand the specific details of how information systems can be attacked. Vulnerabilities can often be addressed with security patches, user/employee training, and implementing network hardware such as firewalls and IDSes.