SECAI Core · phase 8 of 15 · noun

Risk

Likelihood and impact (or consequence) of a threat actor exercising a vulnerability.

The Explain card

Plain English
Risk is the combination of how likely it is that a threat actor exploits a vulnerability and how bad the consequences would be if they did. Likelihood times impact.
Example
An internal AI assistant reaches HR documents through retrieval. The vulnerability is prompt injection via uploaded files. Likelihood is moderate because staff upload external documents daily; impact is high because salaries and disciplinary records could leak. That combination makes it a high risk worth fixing first.
Why it matters
Defenders cannot fix everything. Scoring risk lets you spend limited time and budget on the exposures that actually matter, and explain the choice to leadership.
Hook
Risk equals how likely, times how much it hurts.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

In the model risk register, the assessor records residual risk for the chatbot that retrieves payroll files after the threat model is signed.

How it is built
  • risk root chance of loss or harm
Where it came from
Origin
French risque, from Italian risco or rischio, from rischiare, to run into danger, of uncertain further origin
Entered the language
1660s
What changed
It entered English as a merchant word for the chance of loss on a voyage or a venture. Insurers in the early 1700s priced that chance as a line of business. Engineering and later security work treated it as a scored quantity that can be accepted, transferred, reduced, or avoided.
How it is spelled
Pattern
After a short vowel, English writes /sk/ as sk, as in disk and mask
Pattern
i spells short /ɪ/ before a final consonant cluster, as in list and mist
Breaks the pattern
French risque and English risqué keep the -que spelling and a different sense
Breaks the pattern
Seventeenth-century English still wrote this word as risque before the k spelling settled

Spelled like

  • disk
  • brisk
  • frisk
  • whisk
  • mask
  • task
Broken into chunks
  • risk
    • risky
    • risking
    • riskless
  • isk
    • brisk
    • disk
    • whisk
    • frisk
  • sk
    • mask
    • task
    • desk
    • tusk
What it sits beside

Same subject

Same shape

  • brisk
  • disk
  • frisk
  • whisk

GRC terms

Hazard set

  • threat
  • vulnerability
  • exposure

Short -isk words

  • brisk
  • disk
  • frisk

Where it sits in the deck

Phase 8: Governance, Risk, and Compliance Frameworks

Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.

Neighbours in this phase