Enterprise Technology Glossary

6,173 results · page 236 of 309

• Risk Analysis Simulation

  Risk analysis simulation is a quantitative technique that models uncertainty in inputs as probability distributions and runs repeated computational iterations to produce outcome distributions, supporting enterprise decisions in areas such as financial risk, cybersecurity, operations, and regulatory stress testing.

• Risk Appetite

  Risk appetite is the amount and type of risk an organization is willing to pursue, accept, or retain to meet its objectives, providing a board-approved reference that aligns strategy, governance, and technology decisions with defined risk boundaries and loss thresholds.

• Risk Appetite Statement

  Risk appetite statement is a documented expression by an organization’s governing body of the types and levels of risk it is willing to accept in pursuing objectives, used to guide enterprise risk management, technology decisions, and governance across business and security domains.

• Risk Assessment

  Risk assessment is a structured process that identifies, analyzes and evaluates risks to enterprise assets and objectives so decision-makers can prioritize controls, investments and compliance actions within governance, risk and compliance, security, and business continuity programs.

• Risk Assessment Framework

  Risk assessment framework is a structured set of methods and processes that organizations use to identify, analyze, evaluate, and prioritize risks. It matters in enterprise contexts because it enables consistent risk decisions, documentation, and alignment with governance, audit, and regulatory requirements.

• Risk Assessment Matrix

  Risk assessment matrix is a tabular method for rating and ordering risks by plotting likelihood against consequence levels, enabling enterprises to compare risks consistently, prioritize mitigation and acceptance decisions, and align security and operational responses with defined risk appetite and governance requirements.

• Risk-Based Audit Approach

  Risk-based audit approach is an audit methodology that allocates audit planning and testing effort according to assessed risks of misstatement or control failure, helping enterprises align assurance activities with their risk profile, governance priorities, and technology and process control environments.

• Risk-Based Authentication

  Risk-based authentication is an access control approach that evaluates contextual and behavioral risk indicators for each authentication event and adjusts authentication requirements accordingly, helping enterprises align security controls with risk exposure while maintaining efficient access for workforce, partner, and customer users.

• Risk-Based Test Selection

  Risk-based test selection is a software testing approach that chooses which tests to execute based on assessed risk levels, helping enterprises align testing effort with business, security, and compliance priorities while documenting how testing decisions relate to identified risks.

• Risk Heat Map

  Risk heat map is a visual matrix that plots identified risks by likelihood and impact using color gradations, enabling enterprises to summarize risk exposure, align with formal risk management frameworks, and support governance, prioritization, and communication for security and operational decision-making.

• Risk Management

  Risk management is a structured organizational process for identifying, analyzing, evaluating, and treating risks so objectives stay within defined risk appetite and regulatory constraints. It matters in enterprises because it underpins governance, compliance, security, resilience, and resource allocation decisions.

• Risk Management Framework

  Risk management framework is a structured set of processes and governance practices that organizations use to identify, assess, treat, and monitor risk consistently across systems and business operations, supporting regulatory compliance, enterprise assurance, and alignment of controls with defined risk tolerance.

• Risk Mitigation

  Risk mitigation is the process of selecting and implementing measures to reduce identified risks to a level an organization deems acceptable, supporting governance, regulatory compliance, asset protection, and alignment between technical controls and documented risk appetite.

• Risk Mitigation Plan

  Risk mitigation plan is a documented strategy that identifies and prioritizes risks and specifies actions, owners, and timelines to reduce, control, or monitor them, supporting governance, compliance, security, and continuity objectives in enterprise and technical environments.

• Risk Mitigation Strategy

  Risk mitigation strategy is a documented approach that defines how an organization will treat identified risks to keep them within its risk appetite, guiding control selection, resource allocation, and governance across security, compliance, and enterprise risk management activities.

• Risk Modeling

  Risk modeling is a quantitative and qualitative method to estimate the likelihood and magnitude of adverse events, used by enterprises to support risk assessment, regulatory compliance, and resource allocation across financial, operational, cybersecurity, and other risk management programs.

• Risk Register

  Risk register is a formal, structured record of identified risks, their assessed likelihood and impact, assigned owners, and treatment actions, used by enterprises to support standardized risk management, governance, compliance, and decision-making across security, technology, and business operations.

• Risk Response Strategy

  Risk response strategy is a planned approach that defines how an enterprise treats identified risks through actions such as avoidance, mitigation, transfer, sharing, or acceptance, ensuring that residual risk aligns with documented risk appetite, tolerance, and regulatory or governance requirements.

• Risk Scoring Algorithm

  Risk scoring algorithm is a computational method that assigns numeric or categorical scores to entities, events, or transactions based on defined risk factors and rules, enabling enterprises to standardize, automate, and document risk-based prioritization and decision-making across security, compliance, and operational domains.

• Risky AI usage detection

  Risky AI usage detection is the monitoring and analysis of AI interactions and workloads to identify activity that violates security, compliance, safety, or acceptable use policies, enabling enterprises to enforce controls and integrate AI systems into existing risk and governance processes.