Defining the distinction between Risk and Threat
I was recently involved in a discussion on the differences between Risk and Threat. During the discussion I realised that there is a misconception regarding the two terms. With this in mind I am starting a series of blog posts on the difference between the two concepts. This week, I will start by looking at how each term and concept is different. In the following weeks why each term should be considered differently and how the assessment of each is different will be reviewed. Finally, there will be a discussion on how the management of Risks and Threats should be different.
Risk is defined by the International Standards Organisation AS/NZS ISO 31000:2009 Risk management-principles and guidelines, as “the effect of occurrences on objectives”. Risk therefore focuses on incidents and the effects of those incidents. Risk can have either positive or negative effects, but most people generally see risk as a negative. In addition, risk is generally measured as the likelihood of a particular incident occurring combined with the harm that that incident could cause.
Threat is generally defined as the intention to cause harm. Threat therefore is about intentions and the harm that those intentions could cause. Because Threat is about intentions, it implies that Threats are made by those who possess some form of rational thought. Depending on a person’s philosophical beliefs, threats can be made by Gods, humans or animals. For the purpose of this blog post, Gods and animals will be left to philosophers and scientists. This post and the ones to follow will focus on threats that are made by humans.
When Risk is compared to Threat, Risk looks at different types of events, and the effect those events could cause if they occur. Risk is very event focused. Threat focuses on a person’s or group’s intentions, and the harm those intentions could cause if they are actioned. Threat focuses on the rational actor’s intentions, showing that the two concepts are quite different.
Although many people commonly see Risk and Threat to be the same, they are in fact quite different to each other. In the following blog posts I will review how Risk and Threats are assessed and then how each can be managed.
Leave a Reply