Risks that arise from the loss of confidentiality, integrity, or availability of information or information systems and reflect the potential adverse impacts to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation.
Source(s):
NIST SP 800-161 from NIST SP 800-53 Rev. 4, FIPS 200 - Adapted
NISTIR 7622 from FIPS 200 - Adapted, NIST SP 800-53 Rev. 3