Knowledge · Help
Risk
Risk connects threats, impacts, and controls to the affected elements of the knowledge graph.
After this page, you can
- read risk, impact, control, and evidence as a chain
- connect controls through subject graph relationships
- separate open exposure from effective mitigation
Risk matrix
Likelihood and impact determine exposure
The markers show the same risk before and after effective controls. Its position makes priority and reduction immediately visible.
IInherent
before controls · 4 × 5 = 20
CControlled
after controls · 2 × 3 = 6
Controls move the remaining exposure within the matrix.
What Risk is for
The Risk perspective supports identifying, prioritizing, and treating subject risks. It shows which graph nodes are affected, which impacts are possible, and which controls reduce exposure.
Read matrix, exposure, and controls
The matrix places risks by likelihood and impact. Switching between inherent and controlled exposure shows how strongly published controls reduce risk.
- Inherent describes risk before controls are considered.
- Controlled describes the remaining exposure.
- Relationships such as WEAKENS document the subject effect of a control.
Traceable risk evidence
A visible risk assessment requires curated risks, justified values, and published relationships to controls. Missing evidence remains visible as an open modeling or review task.