2. A quick reminder about risk and risk measurement

2.1 Risk and vulnerability

• First of all, let's remember that risk and objective are inseparable.

  In its most commonly understood negative sense, a risk is the threat that an event, action or inaction, the likelihood of which is uncertain, will affect a company's ability to achieve its objectives.

  It is "the effect of uncertainty on the achievement of objectives", according to ISO 31000, and can be positive or negative. Because risk can also be positive, representing the opportunity that, in the course of an action, an event of uncertain likelihood may improve a company's ability to achieve its objectives. Risk management - and the word "risk" has no antonym - is therefore...