Definitions Related to Risk
For purposes of this module, let's use the following definitions for some key risk terms.
3 slides · 1 min read · Domain 1
Vulnerability
An inherent weakness or flaw in a system or component, which, if triggered or acted upon, could cause a risk event to occur.
- Threat
A human actor or group that makes the deliberate, intentional decision to take actions to exploit (or make use of) a target organization's systems vulnerabilities, as part of achieving or furthering the threat's own goals or objectives.
A Risk
A possible event that can have a negative impact on the organization.
Hazard
A precondition of a system, workplace, or environment that could cause a risk event to happen accidentally, that is, without being the conscious intent of the person involved in that event.
Earthquakes, hurricanes, or weather conditions that could lead to large-scale wildfires are more properly classed as hazards, rather than threats there is no human intention behind a thunderstorm. Pandemics are also hazards, not threats.