Any potential adverse occurrence or unwanted event that could be injurious to either the accounting information system or the organization is referred to as a threat or an event.
The potential dollar loss should a particular threat become a reality is referred to as the exposure or impact of the threat.
The probability that the threat will happen is the likelihood associated with the threat