Risk is defined as a function of the nature and magnitude of a threat, the vulnerabilities to that threat, and the consequences that could result.
A widely used approach is to define the risk function as the product of the three fundamental variables:
Risk = Threat x Vulnerability x Consequence