$\mathit{Threat}$

$\mathit{Vulnerability}$

$\mathit{Risk}$

$$\mathit{Risk} = \mathit{Threat} \times \mathit{Vulnerability}$$