Series ID: EDKS-BASIC-ZH-0117 · Lesson No.117 · Expert Maintenance: Risk and Assurance
Communicating Risk, Controls and Assurance | 风险、控制与保证沟通
Risk communication is not the art of sounding cautious. It is the discipline of making uncertainty, exposure, controls and residual risk visible enough to support action.
At expert level, a risk statement should tell the reader what could happen, why it matters, how likely or plausible it is, what controls exist, where those controls can fail, and what evidence justifies confidence.
专家级风险沟通不是“把语气写得保守”。真正的任务是把风险、影响、控制、剩余风险和保证证据说清楚，让下一步行动可判断。
Chinese Edition Hub · 中文版入口 · ← Lesson No.116 · Expert Systems Review
The risk-control map | 风险控制地图
- hazard
- risk
- likelihood
- impact
- control
- control owner
- residual risk
- assurance
- evidence
- review trigger
1. Hazard vs risk | 危害 vs 风险
A hazard is a source of potential harm. Risk concerns the possibility and consequence of that harm occurring.
2. Risk statement | 风险陈述
Useful pattern:
There is a risk that [event] because [cause/condition], leading to [impact].
3. Avoid vague risk labels | 避免空泛风险词
Weak: There is a security risk.
Better: If access credentials are shared, unauthorised users may obtain customer data.
4. Likelihood | 可能性
State likelihood using a defined scale where one exists.
5. Impact | 影响
Impact may include:
- safety
- financial loss
- service interruption
- privacy
- reputation
- learning outcome
6. Do not multiply labels mechanically | 不要机械套公式
Risk matrices are decision aids, not substitutes for judgement.
7. Inherent risk | 固有风险
Risk before controls are considered.
8. Control | 控制措施
A control reduces likelihood, impact, detectability time or exposure.
9. Preventive control | 预防性控制
Stops an unwanted event from occurring.
10. Detective control | 检测性控制
Finds an event after or as it occurs.
11. Corrective control | 纠正性控制
Helps restore normal state after failure.
12. Control owner | 控制责任人
Every important control should have a clear owner.
13. Control description | 控制描述
State what the control does, when, by whom and with what evidence.
14. Weak control description | 弱控制描述
Staff check the system regularly.
15. Stronger control description | 更强控制描述
The duty engineer reviews the automated error dashboard every hour and records any threshold breach in the incident log.
16. Control effectiveness | 控制有效性
A control can exist on paper but perform poorly in practice.
17. Design effectiveness | 设计有效性
Would the control reduce the risk if operated as intended?
18. Operating effectiveness | 运行有效性
Is the control actually being performed reliably?
19. Evidence of operation | 运行证据
- logs
- records
- test results
- audit trail
- sign-off
20. Residual risk | 剩余风险
Risk remaining after controls.
21. Controls rarely make risk zero | 控制通常不会让风险归零
Communicate what remains.
22. Risk acceptance | 风险接受
Someone with appropriate authority accepts the remaining risk.
23. Risk tolerance | 风险容忍度
The amount/type of risk the organisation is willing to accept.
24. Appetite vs tolerance | 风险偏好 vs 容忍度
These terms vary by framework; define them locally rather than assuming universal usage.
25. Assurance | 保证/确信依据
Assurance is evidence that controls and processes are operating as intended.
26. Assurance is not reassurance | assurance 不等于安慰
It should be evidence-based.
27. First-line evidence | 一线证据
Operational monitoring and control records.
28. Independent review | 独立复核
Where appropriate, assurance may include review by someone not responsible for operating the control.
29. Assurance statement | 保证陈述
Based on the last three months of control logs and the independent test, we have moderate confidence that the access control is operating as designed.
30. Evidence quality matters | 证据质量重要
One successful test does not prove permanent effectiveness.
31. Control failure | 控制失效
State:
- what failed
- when
- risk implication
- temporary measure
- repair owner
32. Compensating control | 补偿性控制
A temporary or alternative control used when the preferred control is unavailable.
33. Do not hide temporary status | 不要把临时控制写成永久解决
34. Key risk indicator | 关键风险指标
A metric used to signal increasing exposure or control weakness.
35. Threshold | 阈值
Define what level triggers review or escalation.
36. Risk trend | 风险趋势
Do not call one event a trend. Use repeated evidence over time.
37. Emerging risk | 新兴风险
A risk that is becoming relevant but is not yet well understood.
38. Unknowns | 未知项
State what is uncertain and what evidence is being gathered.
39. Risk owner vs control owner | 风险责任人 vs 控制责任人
They may be different roles.
40. Risk register | 风险登记表
| Risk | Impact | Control | Owner | Residual |
|---|---|---|---|---|
| data exposure | high | access review | Security | medium |
41. Executive risk communication | 管理层风险沟通
Lead with:
- material change
- exposure
- decision needed
- confidence
42. Operational risk communication | 操作风险沟通
Lead with:
- current state
- control status
- owner
- threshold
- next check
43. Public risk communication | 公众风险沟通
Explain clearly without either minimising or sensationalising.
44. High-risk language | 高风险措辞
Do not soften mandatory action into optional advice.
45. Low-confidence risk | 低置信风险
Low confidence does not mean no action; action depends on stakes and reversibility.
46. Precaution | 预防原则
Where appropriate under applicable rules, serious potential harm may justify temporary controls before causal certainty is complete.
47. Do not claim a framework you are not using | 不要假装符合某个框架
Use generic risk language unless a defined organisational or regulatory framework actually applies.
48. Risk comparison | 风险比较
Compare risks using the same criteria and time horizon.
49. Risk transfer | 风险转移
Moving responsibility or financial exposure does not make the underlying hazard disappear.
50. Risk reduction | 风险降低
Controls reduce exposure.
51. Risk avoidance | 风险规避
Stop the activity that creates the risk.
52. Risk acceptance | 风险接受
Proceed while acknowledging the residual risk.
53. Mandarin transfer: “风险控制”可能指 control 或 management | 先分清功能
54. Mandarin transfer: “保证”不能自动翻成 guarantee | assurance 与 guarantee 不同
55. Practice A | 练习 A
Rewrite five vague risk statements into event-cause-impact form.
56. Practice B | 练习 B
Describe one preventive, one detective and one corrective control.
57. Practice C | 练习 C
Write a short assurance statement with evidence and confidence level.
58. Error clinic | 常见问题
| Problem | Repair |
|---|---|
| Risk vague. | State event/cause/impact. |
| Control exists only on paper. | Check operating evidence. |
| Residual risk omitted. | State what remains. |
| Assurance becomes reassurance. | Cite evidence. |
| Threshold undefined. | Set escalation rule. |
59. First weak link diagnosis | 第一个卡点诊断
- risk misunderstood → statement design.
- control confidence false → evidence problem.
- risk persists unnoticed → monitoring problem.
- temporary control becomes permanent → governance problem.
- no action follows → threshold/owner problem.
60. Seven-day training cycle | 七天训练
| Day 1 | risk statements | 风险陈述 |
| Day 2 | control types | 控制类型 |
| Day 3 | residual risk | 剩余风险 |
| Day 4 | assurance evidence | 保证证据 |
| Day 5 | risk metrics | 风险指标 |
| Day 6 | audience versions | 受众版本 |
| Day 7 | risk briefing | 综合 |
61. Self-test | 自测
Explain a material risk, its controls, evidence of operation, residual risk, confidence and escalation trigger to both an operational and executive audience.
62. For parents and teachers | 给家长和老师
Use low-stakes examples such as project deadlines, lab safety or event planning to teach risk language.
63. Final real-world challenge | 最终真实任务
- Choose one risk.
- Write event-cause-impact statement.
- Identify inherent risk.
- List controls.
- Assign owners.
- Assess operating evidence.
- State residual risk.
- Set threshold.
- Write assurance statement.
- Deliver a two-minute risk briefing.
Next: Lesson No.118 | 下一课
The next lesson turns controlled risk into change execution: planning rollouts, staged releases, communication, monitoring, stop conditions and rollback paths.
Lesson No.118 · Writing Change Plans, Rollouts and Rollbacks · 编写变更计划、发布与回滚
Reference floor: expert-maintenance risk communication. Risk, controls and assurance are evidence-based and tied to explicit action thresholds.
