Which of the following is not a component of a Operations Security “triples”?

Which of the following is not a component of a Operations Security “triples”?

A.
Asset

B.
Threat

C.
Vulnerability

D.
Risk

Explanation:
Reference: pg 298 Krutz: CISSP Study Guide: Gold Edition