{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-risk-management",
  "id": "risk-management",
  "kind": "activity",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Risk Management",
  "ref": "architecture:risk-management",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-risk-identification",
          "json": "https://banes-lab.com/json/records/lexicon/risk-identification",
          "label": "Risk Identification",
          "markdown": "https://banes-lab.com/records/lexicon/risk-identification.md",
          "ref": "lexicon:risk-identification"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-mitigation",
          "json": "https://banes-lab.com/json/records/lexicon/mitigation",
          "label": "Mitigation",
          "markdown": "https://banes-lab.com/records/lexicon/mitigation.md",
          "ref": "lexicon:mitigation"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-compliance",
          "json": "https://banes-lab.com/json/records/architecture/compliance",
          "label": "Compliance",
          "markdown": "https://banes-lab.com/records/architecture/compliance.md",
          "ref": "architecture:compliance"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-security-by-design",
          "json": "https://banes-lab.com/json/records/architecture/security-by-design",
          "label": "Security by Design",
          "markdown": "https://banes-lab.com/records/architecture/security-by-design.md",
          "ref": "architecture:security-by-design"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-priority-based-controls",
          "json": "https://banes-lab.com/json/records/lexicon/priority-based-controls",
          "label": "Priority-Based Controls",
          "markdown": "https://banes-lab.com/records/lexicon/priority-based-controls.md",
          "ref": "lexicon:priority-based-controls"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-unowned-risk",
          "json": "https://banes-lab.com/json/records/architecture/unowned-risk",
          "label": "Unowned Risk",
          "markdown": "https://banes-lab.com/records/architecture/unowned-risk.md",
          "ref": "architecture:unowned-risk"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-speed",
          "json": "https://banes-lab.com/json/records/lexicon/speed",
          "label": "Speed",
          "markdown": "https://banes-lab.com/records/lexicon/speed.md",
          "ref": "lexicon:speed"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-risk-management-speed",
          "json": "https://banes-lab.com/json/records/tension/risk-management-speed",
          "label": "Risk Management / Speed",
          "markdown": "https://banes-lab.com/records/tension/risk-management-speed.md",
          "ref": "tension:risk-management-speed"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-unowned-risk",
          "json": "https://banes-lab.com/json/records/architecture/unowned-risk",
          "label": "Unowned Risk",
          "markdown": "https://banes-lab.com/records/architecture/unowned-risk.md",
          "ref": "architecture:unowned-risk"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-mitigation-plan",
          "json": "https://banes-lab.com/json/records/lexicon/mitigation-plan",
          "label": "Mitigation Plan",
          "markdown": "https://banes-lab.com/records/lexicon/mitigation-plan.md",
          "ref": "lexicon:mitigation-plan"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-restrict-exports",
          "json": "https://banes-lab.com/json/records/lexicon/restrict-exports",
          "label": "Restrict Exports",
          "markdown": "https://banes-lab.com/records/lexicon/restrict-exports.md",
          "ref": "lexicon:restrict-exports"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-contextual",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-contextual",
          "label": "contextual",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-contextual.md",
          "ref": "vocabulary:severity-contextual"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-threat-modeling",
          "json": "https://banes-lab.com/json/records/architecture/threat-modeling",
          "label": "Threat Modeling",
          "markdown": "https://banes-lab.com/records/architecture/threat-modeling.md",
          "ref": "architecture:threat-modeling"
        }
      ],
      "relation": "reinforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-anti-patterns",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-anti-patterns",
          "label": "Anti-patterns",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-anti-patterns.md",
          "ref": "chapter:/ontology#architecture-category-anti-patterns"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-architecture-review-evolution-governance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-architecture-review-evolution-governance",
          "label": "Architecture Review Evolution Governance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-architecture-review-evolution-governance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-architecture-review-evolution-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-core-modular-design",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-core-modular-design",
          "label": "Core Modular Design",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-core-modular-design.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-core-modular-design"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "The activity of identifying risks, rating their likelihood and impact, and assigning each one an owner and a mitigation.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-continuous-compliance",
      "json": "https://banes-lab.com/json/records/architecture/continuous-compliance",
      "label": "Continuous Compliance",
      "markdown": "https://banes-lab.com/records/architecture/continuous-compliance.md",
      "ref": "architecture:continuous-compliance"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-policy-as-code",
      "json": "https://banes-lab.com/json/records/architecture/policy-as-code",
      "label": "Policy as Code",
      "markdown": "https://banes-lab.com/records/architecture/policy-as-code.md",
      "ref": "architecture:policy-as-code"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const risk = assessRisk(fooFeature, {\n  likelihood: 3,\n  impact: 5,\n  controls: [\"rate-limit\", \"audit\", \"rollback\"],\n});\nif (risk.residual > riskTolerance) throw new Error(\"risk not accepted\");\nshipFooFeature();",
    "before": "shipFooFeature();",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "architecture",
    "security",
    "delivery"
  ],
  "severity": "contextual"
}