Talking about risk is just talking about a possible chain of events that in a certain point (or points) hurts us. The hurting point is the impact, the loss with its probability coming from the attributes of the links of the chain. If we assessed those possible chains and we found it reasonable, we can still decide to block preceding links from the path to mitigate the risk.