The potential that a given threat will exploit vulnerabilities of an asset or group of assets to cause loss or damage to the assets. Robin Kennedy, MA, CIsa, CRISC