Which statement accurately defines the relationships among threat, vulnerability, and risk?

• A. Threat is a potential harm source; vulnerability is a weakness that can be exploited.
• B. Risk is the likelihood and impact of a threat exploiting a vulnerability.
• C. Threat is a potential harm source; vulnerability is a weakness that can be exploited; risk is the likelihood and impact of a threat exploiting a vulnerability.
• D. Vulnerability is the cause of risk while threat is the remedy.

Answer: (C)