risk

The potential for an unwanted or adverse impact on organizational operations resulting from an occurrence involving AV and information systems, given the potential impact of a specific threat and the likelihood of that threat taking place.