A weakness or lack of a safeguard that can be

exploited, causing

An event or activity that has the potential to cause

harm to the information systems or networks

An action against an information system or network

that attempts to violate the system security policy

The potential for harm or loss to an information

system or network