None
A condition that exists within an organization, a mission/business process, enterprise architecture, or information system including its environment of operation, which contributes to (i.e., increases or decreases) the likelihood that one or more threat events, once initiated, will result in undesirable consequences or adverse impact to organizational operations and assets, individuals, other organizations, or the Nation.
Source(s):
NIST SP 800-30 Rev. 1
NIST SP 800-82 Rev. 2
NIST SP 800-30