A quick test.

1. Can you explain the difference between a threat and a risk without looking it up?

2. Can you give a real-world example of a vulnerability that has nothing to do with software?

3. Can you explain what a control actually does - and what it does not do?

If any of those felt uncertain, subscribe to Decoded Security. These are exactly the kinds of concepts I break down every week in plain English.