SSCP: Systems Security Certified Practitioner

Security risk exists when a threat can exploit a vulnerability, creating the potential for harm. A breach or attack is a possible realization of that risk, not the combination that defines it.