A cyber security threat possesses the potential to harm an organization's assets by exploiting vulnerabilities, whether intentional or accidental.
A vulnerability represents a security system weakness or gap that can be exploited by malicious hackers.
Risk emerges when a threat successfully exploits a vulnerability, leading to loss, destruction, or damage to assets.