You can also think of risk slightly differently as a mathematical equation ... That mathematical equation is: What is the threat, and what is your vulnerability to that threat? And literally, it's threat times vulnerability equals your risk.