Definition: Any potential event or act (deliberate or accidental) or natural hazard that could compromise IT assets. (ITSG-33/HTRA)