There is an increasing need for quantitative rockfall hazard and risk assessment that requires a precise definition of the terms and concepts used for this particular type of landslide. This paper suggests to use terms that appear to be the more logic and explicit as possible, and describes methods to derive some of the main hazard and risk descriptors. The terms and concepts presented concern the rockfall process (failure, propagation, fragmentation, modelling) and the hazard and risk descriptors, distinguishing the cases of localized hazards and diffused hazards. For a localized hazard, the failure probability of the considered rock compartment in a given period of time has to be assessed and the probability for a given element at risk to be impacted with a given energy must be derived combining the failure probability, the propagation probability and the exposure of the element. For a diffuse hazard that is characterized by a failure frequency, the number of rockfalls reaching the element at risk per unit of time and with a given energy (reach frequency) can be derived. However, when the element at risk is not replaced or repaired, the probability that it is impacted by at least one rockfall must be considered.