RMNext

1. Structured assessment performed before onboarding or continuing with a third party. (12)
6. Risk that arises when excessive dependence is built around one supplier, geography, service or fourth party. (13)
8. An entity engaged by a third party that may create indirect dependency and oversight risk. (11)
10. Fact-finding process used to understand networks, root causes and accountability in fraud or counterfeit risk. (13)
11. Illicit imitation of genuine goods that can damage revenue, trust, safety and brand value. (11)
12. Enterprise capability to absorb shocks, adapt and continue critical operations. (10)
14. Risk area linked to protection, use and exposure of personal or sensitive data. (7)
15. AI pattern where systems can plan, take actions and orchestrate workflows under defined guardrails. (9)
17. Security testing method used to identify exploitable vulnerabilities before threat actors do. (11)

2. The ability to sustain critical business services during disruption; central to BCP. (10)
3. Governance principle that expects AI to be ethical, transparent, fair and accountable. (13)
4. Inventory approach referenced in counterfeiting context where stock is kept lean and moved quickly. (10)
5. Analytics approach that anticipates incidents, failures or risk movement before they fully materialize. (10)
7. Risk event requiring assessment, response, tracking and closure. (8)
9. Risk linked to country-level conflict, political instability, trade barriers or regulatory shifts. (12)
13. The degree to which enterprise has crisis playbooks, BCP and response routines before disruption strikes. (12)
16. Effect or consequence of a risk event on the organization’s objectives, operations or stakeholders. (6)