What is the difference between threats and hazards in risk assessment?

What is the difference between threats and hazards in risk assessment?

• A. They are the same concept
• B. Threats are environmental hazards
• C. Threats are potential actions by actors; hazards are conditions that can cause harm
• D. Hazards are intentional actions

Answer: (C)

In risk assessment, you distinguish between what could happen due to someone’s intentional action and what could cause harm because of a dangerous condition. A threat is a potential action by an actor—such as a criminal, insider, or hostile group—that could be used to exploit a vulnerability and disrupt operations or cause harm. A hazard, on the other hand, is a condition or situation that has the potential to cause harm if realized, such as exposed wiring, a wet floor, or a faulty process. This distinction matters because it helps you assess risk by identifying who might act (the threat) and what in the environment could lead to harm (the hazard), then evaluate likelihood and impact to prioritize controls. Other statements mix up these ideas by treating threats as environmental factors or hazards as intentional actions, which isn’t accurate.

In risk assessment, you distinguish between what could happen due to someone’s intentional action and what could cause harm because of a dangerous condition. A threat is a potential action by an actor—such as a criminal, insider, or hostile group—that could be used to exploit a vulnerability and disrupt operations or cause harm. A hazard, on the other hand, is a condition or situation that has the potential to cause harm if realized, such as exposed wiring, a wet floor, or a faulty process.

This distinction matters because it helps you assess risk by identifying who might act (the threat) and what in the environment could lead to harm (the hazard), then evaluate likelihood and impact to prioritize controls. Other statements mix up these ideas by treating threats as environmental factors or hazards as intentional actions, which isn’t accurate.