“Risk is traditionally defined as a triplet consisting of what can go wrong, how likely it is to happen, and the consequences of it happening.” However, the folks who wrote this blurb say that people who evaluate the risk of cyber threats should also factor in their guts (“value judgments”).