Operational Risk
Noun · Security & Infosec
Definitions
The risk of loss or harm caused by failed processes, human error, system breakdowns, poor governance, or external events affecting operations. In security programs, operational risk includes misconfigurations, weak access processes, vendor failures, and incident response gaps.
In plain English: The chance that everyday process or system problems could cause harm or disruption.
Example: "The unsupported identity bridge created operational risk because one failure there could block both login and recovery workflows."