Risk s the combination of threats and vulnerabilities that identifies the possibility of loss in an organization.