The most effective way to define risk is with this simple equation:
Risk = Threat x Vulnerability x Cost
This equation is fundamental to all information security.

References: http://www.icharter.org/articles/risk_equation.html