Which describes the proper relationship of the words "threat," "exposure," and "risk"?
A.
An exposure gives rise to a threat, which exploits a risk and leads to a vulnerability.
B.
A risk causes a vulnerability that leads to a threat and causes an exposure.
C.
An exposure allows a weakness that leads to a threat creating an exposure.
D.
A threat can exploit a vulnerability. The probability of this happening is the risk. Once the vulnerability is exploited there is an exposure.
Explanation:
A company may identify a vulnerability, which is a weakness or lack of a safeguard.
They then need to identify the threat agent that could take advantage of this
vulnerability. The threat is that someone would exploit this vulnerability. The
probability of this taking place is the risk, which has to be calculated.