SSCP: Systems Security Certified Practitioner

Risk represents the likelihood that a threat event will occur or successfully exploit a vulnerability, commonly evaluated along with its potential adverse impact. A threat is the potential event itself, while a vulnerability is a weakness that may be exploited.