# Risk Management

Record: `arch:risk-management`
Kind: activity
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: architecture, security, delivery
Canonical: https://banes-lab.com/ontology#arch-risk-management

## Repair

- Refactored by: Add Mitigation, Reduce Exposure
- Detected by: risk register gaps
- Violated by: critical risk without owner/mitigation
- Measured by: residual risk score
- Enforced by: review gates

## requires

- [Risk Identification](https://banes-lab.com/records/lex/risk-identification.md)
- [Mitigation](https://banes-lab.com/records/lex/mitigation.md)

## reinforces

- [Compliance](https://banes-lab.com/records/arch/compliance.md)
- [Security by Design](https://banes-lab.com/records/arch/security-by-design.md)

## enables

- [Priority-Based Controls](https://banes-lab.com/records/lex/priority-based-controls.md)

## conflicts-with

- [Unknown/Unowned Risk](https://banes-lab.com/records/lex/unknown-unowned-risk.md)
- [Unowned Risk](https://banes-lab.com/records/arch/unowned-risk.md)

## tensions-with

- [Speed](https://banes-lab.com/records/lex/speed.md)

## tensions

- [Risk Management Speed](https://banes-lab.com/records/tension/risk-management-speed.md)

## referenced-by

- [Threat Modeling](https://banes-lab.com/records/arch/threat-modeling.md)
- [Compliance](https://banes-lab.com/records/arch/compliance.md)