Transformative Risk Management by Andres Agostini

From a security perspective, risk is a function of the likelihood of a given threat source exercising a particular potential vulnerability, and the resulting impact of that adverse event on the organization.