A risk coordinator uses the word risk for both a generic threat statement library entry and a scored register item for the water treatment plant. How should IRM terminology separate those ideas?
Select an answer to reveal the explanation.
Short Explanation
One is the recipe card, the other is tonight’s dinner at that plant. The statement defines the threat idea; the risk record applies and scores it for a real entity.
Full Explanation
IRM distinguishes risk statements (definitions or library language describing a risk concept) from risks (instances scoped to entities, often with assessment and scoring). Clear terminology prevents mixing a generic threat blurb with a plant-specific register entry. That separation is GRC overview terminology, not SIR or VR ownership.