Which statement best defines a risk?