Governance Risk Compliance
风险登记册
A central repository listing identified organizational risks, their likelihood, impact, mitigation actions, and responsible parties, maintained as part of risk management processes.
Quick answer: A central repository listing identified organizational risks, their likelihood, impact, mitigation actions, and responsible parties, maintained as part of risk management processes.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Quick answer
A central repository listing identified organizational risks, their likelihood, impact, mitigation actions, and responsible parties, maintained as part of risk management processes.
Why it matters
风险登记册 matters because it supports clear communication in Governance Risk Compliance contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Editorial context
This page is rendered as static HTML from source-backed terminology data so search engines and AI systems can parse the content without client-side code.
Definition
A central repository listing identified organizational risks, their likelihood, impact, mitigation actions, and responsible parties, maintained as part of risk management processes.
Operational example
The risk register is updated quarterly to reflect new threats, changes in impact, and the effectiveness of mitigation strategies.
Localized example
风险登记册每季度更新，以反映新威胁、影响变化及缓解措施的有效性。
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
