What are we protecting?
Security goals are often grouped into confidentiality, integrity, and availability. These mean keeping information private, keeping it accurate, and keeping it accessible to authorized people when they need it.
Risk in plain language
Risk appears when a threat can use a weakness to affect something valuable. A reused password is a weakness; a criminal trying leaked passwords is a threat; losing access to email is a possible impact. Good security reduces risk in practical layers.