QOTD on Risk vs Threats

Most security people don't understand risk -- they understand threats. Threats are just one input into the risk equation. Others come from operations, strategy, and marketing. -- John Pironti, President of IP Architects

Src: Security Boosted by Risk Management | ITManagement