To support the identification of existing and emerging risks and opportunities, we use a common framework and language when discussing risk, potential likelihood and impacts, and actions and controls for risk mitigation.