A condition that exists within an organization, a mission/business process, enterprise architecture, or information system including its environment of operation, which contributes to (i.e., increases or decreases) the likelihood that one or more threat events, once initiated, will result in undesirable consequences or adverse impact to organizational operations and assets, individuals, other organizations, or the Nation.
Source(s):
NIST SP 1800-21B
under Predisposing Conditions
from
NIST SP 800-30 Rev. 1
NIST SP 800-30 Rev. 1
NIST SP 800-82 Rev. 2