312-76V3: EC-Council Disaster Recovery Professional (EDRP)

A threat is any circumstance or event with the potential to adversely affect organizational operations or organizational assets. A vulnerability is a weakness or flaw that a threat may exploit, while impact is the harm that results if the event occurs. NIST uses this definition in SP 800-30 Rev. 1.