Threat

A potential occurrence that may cause an undesirable or unwanted outcome for an organization or a specific asset. Any circumstance or event with the potential to adversely impact an information system through unauthorized access, destruction, disclosure, modification of data, and/or denial of service. The potential danger that a vulnerability may be exploited intentionally, triggered accidentally, or otherwise exercised.