"The characteristics of an installation, system, asset, application, or its dependencies that could cause it to suffer a degradation or loss (incapacity to perform its designated function) as a result of having been subjected to a certain level of threat or hazard". (DoD, Defense Critical Infrastructure Program (DCIP), August, 2005, p. 14)