Dictionary · Cybersecurity Fundamentals
Threat
Risk · Beginner
A potential cause of an unwanted incident that may harm a system, an organization, or the people who depend on it.
It is something that could go wrong and hurt you, whether a storm, a mistake, or a person trying to break in. It is not the weakness itself and not the measured chance of loss.
Example: A phishing crew is a threat. An unpatched mail server is a weakness they might use. The combination creates risk.
Common misconception
- A threat is not the same thing as a vulnerability. One is the potential cause; the other is the weakness.