The combination of the likelihood of an event and its impact.

The combination of the likelihood of an event and its impact.

• A. Probability
• B. Risk
• C. Threat
• D. Standard

Answer: (B)

Risk is the measure that combines how likely something is to happen with how severe the consequences would be if it did. In IT risk management, risk is often viewed as a function of likelihood and impact, guiding how we prioritize controls and responses. Probability alone only describes the chance of occurrence, not the outcome. A threat is a potential cause of harm, not the assessed severity or combined likelihood–impact. A standard is a guideline or benchmark, not an assessment of risk. So the description “the combination of the likelihood of an event and its impact” points to risk.

Risk is the measure that combines how likely something is to happen with how severe the consequences would be if it did. In IT risk management, risk is often viewed as a function of likelihood and impact, guiding how we prioritize controls and responses. Probability alone only describes the chance of occurrence, not the outcome. A threat is a potential cause of harm, not the assessed severity or combined likelihood–impact. A standard is a guideline or benchmark, not an assessment of risk. So the description “the combination of the likelihood of an event and its impact” points to risk.