One Language for Risk

How twenty-seven open frameworks become one, and why every board, risk officer, auditor and regulator should read the same page.

Risk management did not grow up as one discipline. It grew up in separate rooms, the factory, the plant, the launch pad, the bank, the project office, the data center and the disaster zone, and each room wrote its own book in its own words. The result is a profession in which "tolerance" means three things, in which a risk with four names has no owner, and in which the software agents that now read our registers translate nothing.

One Language for Risk reads twenty-seven open sources one by one and with the same three questions, and shows that, stripped of vocabulary, they describe one cycle and the same handful of objects. From that reading it proposes a single vocabulary, with every retired term kept as an alias, and the Consolidated Risk Management Framework described on this site.

Written for boards and their committees, chief risk officers, business leaders, auditors, supervisors, researchers and the people who build the systems and the agents that will execute risk management, it is not a standard and not a product. It is a reading, an argument and a specification, and an invitation to dismantle it.

Affonso Taciro Júnior has spent about thirty years in risk management, compliance and governance in large banks, in several countries, as chief compliance officer, head of non-financial risks and member of industry risk committees. A statistician by training, with a master's in mathematical modeling applied to finance, he is the founder of Ypslon.ai, an AI risk intelligence company, and the co-author of Gestão de Riscos no Brasil.

Available on Amazon in paperback, hardcover and Kindle editions. [links to be added at publication]