Cyber-Attack vs. Cyber Threat vs. Cyber Risk

The difference between a cyber-attack versus a cyber threat and cyber risk is that a cyber-attack is an active offensive action where a bad actor is attempting to compromise a system. A cyber threat is a probability that a specific type of attack may occur. Cyber risk is an area where if exploited, it could be leveraged by a cyber attack. Cyber risk is like any risk and measures the likelihood and impact of a security breach.