Knowledge Maxxing← Back to topic library
Responsible Tech MaxxingIntermediateRisk Management75 sec
Risk control
A risk control is a specific measure put in place to reduce a risk's likelihood or severity, such as a guardrail, review step, or monitoring alert.
Prerequisite: Risk register
What matters
A risk is only meaningfully reduced once a real control is implemented and verified; identifying a risk alone does nothing to lower it.
Example
Adding a mandatory human review step for any high-value transaction a fraud model flags is a risk control reducing the severity of a false positive.
Common misconception
Identifying and documenting a risk is not the same as controlling it; a control is the actual measure implemented to reduce that risk's likelihood or impact.
Recall question
What must happen after a risk is identified for it to actually be reduced?
Keywords and related concepts
risk controlmitigationguardrailrisk register