Risk vs Exposure — Understanding the Difference Between Vulnerability and Impact
Risk and Exposure are related but distinct concepts in cybersecurity. Exposure refers to the presence of a weakness or reachable asset, while risk reflects the likelihood and impact of exploitation. This SECMONS glossary entry explains how the distinction influences prioritization and security strategy.