Risk is defined as the effect of uncertainty on objectives. It can be positive or negative depending on whether it enhances or hinders the achievement of objectives. Threat is a potential cause of risk that could have a negative impact on objectives. Continuity is the ability to maintain or resume normal operations after a disruption or disaster. Vulnerability is a weakness or exposure that could be exploited by a threat to cause harm or damage.