Risk is the possibility of losing something of value. Values (such as physical health, social status, emotional well-being, or financial wealth) can be gained or lost when taking risk resulting from a given action or inaction, FORESEEN or unforeseen (planned or not planned). Risk can also be defined as the intentional interaction with uncertainty. Uncertainty is a potential, unpredictable, and uncontrollable outcome; risk is a consequence of action taken in spite of uncertainty.

Three types of risks : The three types of risks are: a) Personal risk describes the loss of life or loss of income because of a SICKNESS, disability, old age, or unemployment. b) Property risk involves losses to property as a result of perils, like FIRE or theft, and hazards.

The risk is the potential of a significant impact resulting from the exploit of a VULNERABILITY.

*In computer security, a vulnerability is a weakness which can be exploited by a Threat Actor, such as an attacker, to perform unauthorized actions within a computer system.

Vulnerability – Weaknesses or gaps in a security program that can be exploited by threats to gain unauthorized access to an ASSET. A vulnerability is a weakness or gap in our protection efforts. Risk – The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability.