The holistic management process ensuring critical business functions continue during and after significant disruptions.

A structured set of security controls and practices designed to protect information systems from cyber threats.

A systematic evaluation of risks embedded in business processes to identify control gaps and improvement opportunities.

Capital set aside by financial institutions to absorb potential losses from failed processes, people, systems, or external events.

An ongoing process for identifying, classifying, prioritizing, remediating, and reporting security vulnerabilities across IT assets.

Technologies and policies that detect and prevent unauthorized transmission, use, or exfiltration of sensitive information.

A predetermined trigger point for a risk metric that signals when risk exposure exceeds acceptable levels requiring management action.

A structured approach defining how an organization identifies, assesses, treats, monitors, and reports risks across all business functions.

A structured approach to identify, assess, and mitigate risks throughout the AI system lifecycle from design to deployment and monitoring.