https://www.lifars.com/2020/07/threat-vulnerability-risk-what-is-the-difference/