Ravi Sir's Cyber Security Cards › Comparison Cards
Threat vs Vulnerability vs Risk
Threat vs Vulnerability vs Risk Vulnerability : a weakness. Example: software that is not updated. Threat : a person or event that may use that weakness. Example: an attacker. Risk : how likely it is × how much damage it can do. Vulnerability: a broken door lock . Threat: a thief in the area. Risk:
Read card text
What this card says
What each one is
Vulnerability: a weakness. Example: software that is not updated.
Threat: a person or event that may use that weakness. Example: an attacker.
Risk: how likely it is × how much damage it can do.
House example
Vulnerability: a broken door lock.
Threat: a thief in the area.
Risk: high if the house is on a busy road, low if no one can reach it.
Same bug, two risks
The same unpatched bug (a CVE, a publicly listed security bug):
On a lab computer with no network → low risk.
On a public login page → high risk.
Why it matters
You cannot fix everything at once. Fix the highest risk first.
Risk = likelihood × impact.
Learn more in the lesson: 47.2 Networking and Protocols (MNC rounds)