This Guide provides the definitions of generic terms related to risk management. It aims to encourage a mutual and consistent understanding of, and a coherent approach to, the description of activities relating to the management of risk, and the use of uniform risk management terminology in processes and frameworks dealing with the management of risk. This Guide is intended to be used by: — those engaged in managing risks, — those who are involved in activities of ISO and IEC, and — developers of national or sector-specific standards, guides, procedures and codes of practice relating to the management of risk. For principles and guidelines on risk management, reference is made to ISO 31000:2009.