Match each risk assessment term to its correct definition: Terms: 1. Asset 2. Threat 3. Vulnerability 4. Control Definitions: A. A resource, system, or data of value that requires protection B. A potential cause of an incident that may result in harm C. A flaw or weakness that can be exploited D. A safeguard or countermeasure implemented to reduce risk

### The pairs | Item | Matches | Why | |---|---|---| | Asset | Something valuable that needs protection | The assessment identifies resources, systems, or information that matter to the organization. | | Threat | A potential cause of harm | A threat is a possible source of an unwanted event. | | Vulnerability | A weakness that could be exploited | A vulnerability creates an opportunity for a threat to affect an asset. | | Control | A measure recommended to address risk | Controls are safeguards or practices intended to reduce risk. | ### The concept These terms describe different parts of risk reasoning. An asset is what may be harmed; a threat is a possible cause; a vulnerability is a weakness; and a control is a response. Risk describes the potential consequences of these conditions together. ### Terms - **Risk**: the possibility of harm and its consequences. - **Exploit**: to use a weakness to cause an effect. ### Remember Do not confuse the weakness with the threat that might take advantage of it.