BC067_English: Understanding Threats, Vulnerabilities and Risks - An A-Z for Leaders_English

The ability for leadership teams and risk practitioners to effectively control disruptive incidents which might present potential harm to people, operations, assets, facilities, information, financial solvency, business interests, and the reputation of the organization is based on their ability to understand the difference between a THREAT, a VULNERABILITY, and a RISK. A THREAT is an action, potential action, or inaction which is likely to cause damage, harm or loss. A VULNERABILITY is a weaknesses or gap in protective measures that can be exploited by THREATS. And, a RISK is the potential or possibility of compromise, loss, injury or other adverse consequence. The first stage in exerting effective and focused resilience measures to control risks is to map them. This can be done by mapping RISKS from A to Z, and then defining what they mean to an individual, activity or the broader interests of the organization.