Risk

In cybersecurity, risk is the potential for loss or damage when a threat exploits a vulnerability. Risk is typically expressed as a combination of the likelihood that something bad will happen and the impact if it does. Risk management is about making informed decisions about which risks to mitigate, accept, transfer, or avoid.

Not every vulnerability needs to be fixed immediately, and not every threat needs the same level of defense. Risk assessment helps you prioritize — focusing your limited resources on the vulnerabilities most likely to be exploited and the threats that would cause the greatest harm to your business and your customers' missions.