Risk Statement
Noun · Security & Infosec
Definitions
A concise written description of a risk that explains the condition, the potential event, and the likely impact if it occurs. Strong risk statements are specific enough to guide decisions and ownership instead of reading like vague generic concerns.
In plain English: A short written description of a specific risk and why it matters.
Example: "The updated risk statement made it clear that shared admin accounts could prevent reliable attribution during a production breach investigation."