Definition
SAM risk information is the information that describes the risk itself — its characteristics: severity, frequency, defensibility, and many more. It is what the system’s Why stage produces: risk zones, risk sets, threats, and the organization’s own picture of where its risk lives.
Why This Matters
Understanding a risk’s characteristics serves two purposes. The better a risk is understood, the better it can be managed. And understanding which characteristics matter most in this organization’s context is what lets a team put its limited resources where they do the most good.
SAM risk information is one of three kinds of information the platform aggregates — alongside SAM risk management information (how the risk is managed) and SAM risk management performance information (whether the management is working).