Separate causes, events, and consequences in a risk pathway.
Workplace moment In a postmortem draft, Jun writes "poor training caused customer harm." Compliance pushes back: the training gap was a cause, the misconfigured workflow was the event, and the harm was the consequence. The distinction affects treatment. You need a defensible next move before the risk turns into an issue. Framework path NIST SP 800-30 Rev. 1 risk assessment process Risk pathways become clearer when causes, events, and consequences are separated. NIST-style assessment distinguishes threat sources, vulnerabilities, likelihood, and impact. In operational language: causes create conditions, an event happens, consequences affect objectives. The mechanism is intervention point clarity. If…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in