Risk

Possibility that a concrete threat may exploit a vulnerability to cause a loss or damage in an information asset. Usually it is considered as a combination of the probability of an event and its consequences.