GB/T 23694-2024Risk management - Vocabulary (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document replaces GB/T 23694-2013 "Risk Management Terminology". Compared with GB/T 23694-2013, in addition to structural adjustments and in addition to logical changes, the main technical changes are as follows.

--- Deleted 7 terms. risk management framework, consultation and communication, clear environment, risk description, risk matrix, risk register, risk Overview (see 3.1.1, 4.2.1, 4.3.1, 4.5.1.1, 4.6.1.7, 4.8.2.4, 4.8.2.5 of the 2013 edition);

--- Changed the term "control" to "risk control" (see 3.3.33, 4.8.1.1 of the 2013 edition);

--- Added 11 terms. objective (3.1.2), uncertainty (3.1.3), risk management system (3.2.4), risk management maturity (3.2.5), organization (3.3.7), threats (3.3.13), opportunities (3.3.23), risk drivers (3.3.24), risk communication (3.3.44), Risk early warning (3.3.45), risk-informed decision-making (3.3.46);

--- Changed the definition of the term "event" (see 3.3.11).

This document has been modified to adopt ISO 31073:2022 "Risk management terminology".

This document has the following structural adjustments compared to ISO 31073:2022.

---Added 3.2.4;

---Added 3.3.44~3.3.46.

The technical differences between this document and ISO 31073:2022 and their reasons are as follows.

--- Added 4 terms, "risk management system" (see 3.2.4), "risk communication" (see 3.3.44), "risk warning" (see 3.3.45), "Risk-informed decision-making" (see 3.3.46) to suit my country's national conditions;

--- Changed the definition of the term "event" (see 3.3.11) for easier understanding.

The following editorial changes were made to this document.

--- Added notes to 12 terms, "risk" (see Note 4 of 3.1.1), "uncertainty" (see Note 3 of 3.1.3), "risk management" (see note to 3.2.1), "risk identification" (see note 3 to 3.3.9), "risk sources" (see note to 3.3.10), "threats" (see note to 3.3.13),

Note 3), "risk analysis" (see Note 2 of 3.3.15), "probability" (see Notes 2, 3 and 4 of 3.3.19), "opportunity" (see Notes 3.3.24

Note 4 to 3.3.26), "risk attitude" (see Note 1 and Note 2 to 3.3.30), "risk integration" (see Note 1 and Note 2 to 3.3.31), "residual risk" (see Note 3.3.32),

Note 3 to 3.3.38).

1 Scope

This document defines common terms that may be used by an organization when managing the risks it faces.

This document applies to risk management related activities carried out by all organizations or individuals.

2 Normative references

This document has no normative references.

3 Terms and definitions

The following terms and definitions apply to this document.