Assessment unit
One risk you assess, with its own impact, likelihood and controls. Often just "unit". See The assessment unit screen.
Inherent and residual risk
Inherent is the risk before controls; residual is what's left after the controls you've confirmed. Both are impact × likelihood, on a scale of 0 to 10,000. See Risk scores.
Severity bands
Scores are grouped into High (4,000 and over), Medium (2,000 to 3,999) and Low (under 2,000).
Control
Something you do that reduces a risk's impact, its likelihood, or both. Each control has a strength. See Manage a unit's controls.
Confirmation
Recording whether a control is in place this cycle: Confirmed, Partial, Not in place or Not applicable. See Confirm a control.
Cycle (reporting period)
The repeating period over which each unit is assessed, for example every 3 months. See The assessment cycle.
Back-Log, Activity Board, Forward-Log, History
The places work lives: waiting to start (Back-Log), in progress (Activity Board), done for this cycle (Forward-Log, for recurring work) or done for good (History, for one-off work). See Boards, Back-Logs and History.
Workflow, state, transition
A workflow is the set of stages (states) work goes through, and the allowed moves (transitions) between them. See How workflows work.
Workflow role
A role within one workflow, such as Assessor or Reviewer, that decides who can make which moves. Different from your tenancy role. See Workflow roles.
Risk appetite
How much residual risk you're willing to accept, per risk type. See Risk appetite.
Criticality
How much a control matters: Key, Standard or Minor, worked out from what would happen if it failed. See Control Criticality.
Claimed vs proven
Whether the risk reduction your assessment claims is backed up by recent, effective tests. See The Assurance Picture.
Finding
Something wrong that needs putting right, with a severity, an owner and a fix-by date. See What a finding is.
Action
One piece of work to put something right, with an owner and a due date. See About actions.
Proposal
A suggested change to a unit or control that testing makes for the assessor to apply. See Proposals from testing.
Tenancy
Your organisation's own space in Conform. See Your tenancy.
Topic
A register you design yourself in Data Composer.