There is an increasing need for quantitative rockfall hazard and risk assessment that requires a precise definition of the terms and concepts used for this particular type of landslide. This paper suggests using terms that appear to be the most logic and explicit as possible and describes methods to derive some of the main hazards and risk descriptors. The terms and concepts presented concern the rockfall process (failure, propagation, fragmentation, modelling) and the hazard and risk descriptors, distinguishing the cases of localized and diffuse hazards. For a localized hazard, the failure probability of the considered rock compartment in a given period of time has to be assessed, and the probability for a given element at risk to be impacted with a given energy must be derived combining the failure probability, the reach probability, and the exposure of the element. For a diffuse hazard that is characterized by a failure frequency, the number of rockfalls reaching the element at risk per unit of time and with a given energy (passage frequency) can be derived. This frequency is relevant for risk assessment when the element at risk can be damaged several times. If it is not replaced, the probability that it is impacted by at least one rockfall is more relevant.