Match each risk assessment term with its correct definition: Terms: 1. Threat 2. Vulnerability 3. Control 4. Residual risk Definitions: A. A flaw or weakness in a system that can be exploited B. A potential actor, event, or condition that may cause harm C. The exposure to danger or loss that remains after safeguards have been implemented D. A safeguard or countermeasure deployed to mitigate risk

### Why this is right These terms describe different parts of risk assessment. A threat may exploit a vulnerability; a control is applied to reduce the resulting risk; residual risk is what remains afterward. ### The pairs | Item | Matches | Why | |---|---|---| | Threat | An actor or event that may cause harm | Threats are possible sources of harmful activity or events. | | Vulnerability | A weakness that may be exploited | A vulnerability gives a threat a possible route to cause harm. | | Control | A measure used to reduce risk | Controls include technical and administrative protections. | | Residual risk | Risk remaining after controls | Controls can reduce risk without eliminating it. | ### Terms - **Administrative control**: A policy or procedure used to manage security. - **Technical control**: A technology-based protection, such as authentication. ### Remember Keep the chain straight: threat exploits vulnerability, controls reduce risk, and residual risk remains.