How to understand and express enterprise risk

What is risk, and how can it be expressed? Should risk be defined through probabilities or should risk be defined through uncertainties?