Explain difference between threat, vulnerability and risk with examples

Question

Accepted Answer

Threat is a potential danger, vulnerability is a weakness that can be exploited, and risk is the likelihood of a threat exploiting a vulnerability.

Threat: External or internal factor that can cause harm to an organization's assets (e.g. malware, hackers, natural disasters)
Vulnerability: Weakness in a system or process that can be exploited by a threat (e.g. outdated software, lack of encryption)
Risk: The likelihood of a threat exploiting a vulnerability and the impact it would have on the organization (e.g. high risk of data breach due to unpatched software)