Risk records
Page 2 of 2. 172 records.
Browse the catalog · First JSON page
risk
Unauthorized activity — rogue trading, position mismarking, concealment
risk
Organizational change and transformation failure
risk
Inadequate board and management oversight of risk and control
risk
Missing or insufficient security and privacy policies
risk
Major project / program delivery failure
risk
Innovation and R&D governance failure
risk
Weak internal control environment enabling fraud and error
risk
Discrimination, harassment and hostile-workplace culture
risk
Employment-practice and labor-law violations
risk
Insufficient personnel screening and vetting
risk
Missing security terms in contracts and no disciplinary process
risk
Critical talent loss, scarcity and succession gaps
risk
Workplace health, safety and well-being failures
risk
Failure to detect, assess, and notify breaches on time
risk
No or insufficient incident-response procedures
risk
Missing or insufficient logging and audit trails
risk
No security monitoring or supervision of privileged activity
risk
Cloud multi-tenancy isolation and data-scavenging exploits
risk
Denial-of-service and system saturation
risk
Communications interception, eavesdropping and man-in-the-middle
risk
Poor network architecture and unprotected public connections
risk
Remote-work, mobile and split-tunneling exposure
risk
Session hijacking and unauthorized-protocol egress
risk
Acceptance of data from untrustworthy sources
risk
Negligent advisory activities and breach of duty of care
risk
Core process breakdown and inability to scale
risk
Trade-counterparty performance and settlement disputes
risk
Client intake, documentation and account-management failures
risk
Transaction-processing and execution errors
risk
Product design and model errors
risk
Product and service quality failure
risk
Failed or inaccurate mandatory regulatory reporting
risk
Physical and cyber-physical attacks on facilities and infrastructure
risk
Physical damage to assets from disaster, terrorism or vandalism
risk
Environmental degradation of equipment (dust, humidity, temperature, EMI)
risk
Inadequate protection against fire, flood and physical hazards
risk
Inadequate physical protection and access controls
risk
Remote spying and shoulder-surfing of screens/documents
risk
Theft of equipment, media or unattended devices
risk
Cross-border personal-data transfer without safeguards
risk
Erosion of individual trust and confidence in data practices
risk
Absence of privacy-by-design and default
risk
Power imbalance and loss of self-determination over personal data
risk
Brand and reputational crisis
risk
Stakeholder trust and social-license erosion
risk
Inadequate or absent risk assessment process
risk
Securities-law and SEC-reporting non-compliance
risk
Applications running with excessive privilege / insecure design
risk
Malware delivery, insertion and compromise of systems
risk
Ransomware disrupting operations and data availability
risk
Vulnerabilities introduced during software development
risk
Product, customer or market concentration
risk
Competitive disruption and business-model obsolescence
risk
Geopolitical, macroeconomic and sovereign risk
risk
Innovation shortfall and emerging-technology adoption risk
risk
Failed M&A, integration or divestiture
risk
Strategic misalignment and execution failure
risk
Hardware and equipment failure
risk
Illegal processing of personal or sensitive data
risk
Loss of essential services (power, HVAC, telecoms)
risk
Loss of system maintainability
risk
Software and information-system failure
risk
Use of unlicensed, counterfeit or pirated software
risk
Critical vendor failure, insolvency or concentration
risk
Supply-chain disruption of critical inputs
risk
Malicious supply-chain injection of tampered hardware/software
risk
Third-party compliance failure creating vicarious liability
risk
Vendor/outsourcing service non-performance and disputes
risk
Weak supplier security requirements and monitoring
risk
Inadequate vulnerability scanning and pre-release testing
risk
Exploitation of known, unpatched vulnerabilities
risk
Zero-day exploitation