| Context & Usage |
In security and compliance work, this term helps teams describe controls, risks, identity practices, standards, audits, or protective technologies. It is relevant when managing access, reducing exposure, documenting safeguards, or demonstrating accountability.
Risk owners and project teams use this concept when documenting uncertainty, choosing responses, escalating exposure, and reviewing whether risk actions are working.
Related concepts include Risk, Risk Register, Risk Owner, Issue, Opportunity and Contingency Plan.
|