An action, potential action, or inaction, exploiting a vulnerability (intentionally or accidentally), likely to cause damage, harm, or loss. Threat is the potential harm that can come to an asset. From a People Risk Management perspective, an organization protects its assets against any threat.