Risk is

Risk is

• A. Probability
• B. Uncertainty
• C. All of the above
• D. Consequence

Answer: (C)

Risk is a measure that considers how likely something bad is to happen, how severe the outcome would be, and how much uncertainty surrounds those estimates. This is why the best choice includes all three elements: probability, uncertainty, and consequences. If you focus only on probability, you miss the impact side; if you focus only on consequences, you ignore how likely the event is; and if you ignore uncertainty, you assume perfect knowledge about both likelihood and impact, which isn’t realistic in most security contexts. By covering probability, the impact, and the uncertainty in our knowledge, you capture a complete picture of risk.

Risk is a measure that considers how likely something bad is to happen, how severe the outcome would be, and how much uncertainty surrounds those estimates. This is why the best choice includes all three elements: probability, uncertainty, and consequences. If you focus only on probability, you miss the impact side; if you focus only on consequences, you ignore how likely the event is; and if you ignore uncertainty, you assume perfect knowledge about both likelihood and impact, which isn’t realistic in most security contexts. By covering probability, the impact, and the uncertainty in our knowledge, you capture a complete picture of risk.