Weaver interview question

Define IT Risk and IT Controls