Question: 3. what is the difference between a threat vulnerability and a risk?
Answer: Vulnerability – Weaknesses or gaps in a security program that can be exploited by threats to gain unauthorized access to an asset. ... Risk – The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability.