Which of the following is not a component of a Operations Security “triples”?

Which of the following is not a component of a Operations Security “triples”?

A.
Asset

B.
Threat

C.
Vulnerability

D.
Risk

Explanation:
pg 298
Krutz: CISSP Study
Guide: Gold Edition