Risks that arise from the loss of confidentiality, integrity, or availability of information or information systems and reflect the potential adverse impacts to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation.
Source(s):
NIST SP 800-161
from
NIST SP 800-53 Rev. 4, FIPS 200 - Adapted
NISTIR 7622
from
FIPS 200 - Adapted, NIST SP 800-53 Rev. 3