A _____ describes any circumstance or event with the potential to cause harm to an information system.

A _____ describes any circumstance or event with the potential to cause harm to an information system.

• A. Threat
• B. Risk
• C. Hazard
• D. Vulnerability

Answer: (A)

A threat is any circumstance or event with the potential to cause harm to an information system. It represents the possible source of harm, which can be intentional (like a hacker), accidental (such as a misconfiguration), or natural (for example, a flood). This is why it’s the best choice: it names the potential event that could lead to damage, without implying how likely it is or what weakness might be exploited. Risk involves both the likelihood and impact of that harm given vulnerabilities and controls, vulnerability is the weakness that could be exploited, and hazard is a broader term for danger that isn’t as precise in information security contexts.

A threat is any circumstance or event with the potential to cause harm to an information system. It represents the possible source of harm, which can be intentional (like a hacker), accidental (such as a misconfiguration), or natural (for example, a flood). This is why it’s the best choice: it names the potential event that could lead to damage, without implying how likely it is or what weakness might be exploited. Risk involves both the likelihood and impact of that harm given vulnerabilities and controls, vulnerability is the weakness that could be exploited, and hazard is a broader term for danger that isn’t as precise in information security contexts.