Enterprise risk & controls · Core
Cyber risk
Also called: cybersecurity risk
ELI5
Risk of harm from failures or attacks affecting information systems and data.
Used in conversation
“The board will ask what happens if cyber risk moves outside tolerance.”
Pitch context
You will see “Cyber risk” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.
Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.
Caution
Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.
Need an investor or company deck?
Bring the business, the evidence or the half-formed ask. We help it travel beyond the spreadsheet.
See how pitch.dog can helpSources & evidence · 3
Direct term-level sources and supporting source families.
- OECD — G20/OECD Principles of Corporate Governance 2023Direct source · institutional · checked 2026-08-16
- National Institute of Standards and Technology — Computer Security Resource Center GlossaryDirect source · primary · checked 2026-08-16
- U.S. Securities and Exchange Commission — EDGAR and filing resourcesSupporting source family · primary · checked 2026-08-16