The possibility of an event occurring that will have an impact on the achievement of objectives. Risk is measured in terms of impact and likelihood (commonly used in the context of internal controls and enterprise risk management).