For example, your product can have a low risk of early regulatory approval which is a good thing but has an impact to time, scope, etc. or runs a high risk of late regulatory approval which has other impacts such as not being first to markets, etc. an issue is a risk that has been realized. It has already come to fruition and you should have a mitigation plan I place.