
This chart covers the main steps, from identifying assets to creating a remediation plan.

To differentiate the three, we can think of it as follows:
Risk: something bad that could happenThreat: something bad that is happeningVulnerabilities: weaknesses that could lead to a threat