Risk is the potential for loss or damage when a threat exploits a vulnerability.