Definition
A Threat is any event, action or condition that may compromise the security of an Asset by exploiting an existing Vulnerability.
Human Explanation
A Threat may be a person, software, failure, error, natural disaster or any other event capable of causing harm.
Why it Matters
Identifying Threats makes it possible to prepare appropriate protection before an incident occurs.
Conceptual Boundary
A Threat does not mean that harm will certainly occur. It represents the possibility of an undesirable event.
Practical Perspective
The same Threat may affect two organisations very differently depending on their Assets and safeguards.