A risk statement is associated to hospital entity types so each in-scope entity receives a risk to assess. What parallel architecture behavior applies?
Select an answer to reveal the explanation.
Short Explanation
Same bakery, different pastry. Risk statements are the recipes; generation puts a risk on each scoped entity—just like controls from control objectives. Parallel pattern, risk flavor.
Full Explanation
Risk item generation mirrors control generation: associating risk statements to entity types or entities produces risk records on those entities for assessment and response. The behavior is definition-to-instance, not a year-end audit side effect or a change-request substitute. Treating association as merely informational leaves entities without actionable risks. Architects should design statement scoping with generation in mind.