The probability and consequence of adverse events affecting security objectives, requiring systematic assessment and management across domains for holistic threat reduction.