<P> Risk is the likelihood that something bad will happen that causes harm to an informational asset ( or the loss of the asset ) . A vulnerability is a weakness that could be used to endanger or cause harm to an informational asset . A threat is anything ( man - made or act of nature ) that has the potential to cause harm . </P>
how is risk defined in the context of information technology and information security
the likelihood that something bad will happen that causes harm to an informational asset ( or the loss of the asset )