An  Assurance Case is a claim that a particular enterprise asset or group of Functional Asset adequately mitigates certain identified Risk Types by means of appropriated Control Measures.

An  Assurance Case shall provide confidence that the concerned assets will function as intended in their environment of use.

Privacy Processing Activity(ies), Data Lineages are examples of  Assurance Cases .

An  Assurance Instrument is a resource or course of actions used by an Assurance System to achieve its objectives.

For instance:

Actions plans are course of actions aimed at solving incidents.

Data Controls are mechanisms used to ensure data quality and data integrity

Privacy Representatives are used to identify national entities in charge of privacy.

A  Governance Event is any event that has an impact on the management and governance of an Enduring Initiative.

This includes the result of Assessments, Decisions, recorded Incidents, Drivers, etc.

A  Management System is a mezzo Enduring Initiative within an Enterprise, aimed at creating, maintaining, evaluating, evolving, and operating a collection of essential  Functional Architecture Assets of the Enterprise.

A  Management System may transcend organisational boundaries and consequently requires an integrated team working under the direction of a Management Initiative Committee.

A  Risk Type is a distinct category or classification of risk based on its origin, nature, or potential impact. It helps in organizing and addressing different sources of uncertainty or potential harm that an individual, organization, or system might face. By categorizing risks into different types, entities can develop more targeted mitigation strategies and response plans.

Common risk types include Operational Risk Type, Privacy Risk Type, and Compliance Risk Type, among others,

A  Compliance Case is an Assurance Case (a claim) that a particular set of Resource Operating Assets (Systems or Processes) adequately mitigates certain identified Compliance Risk Types by means of appropriated controls.

A  Compliance Case shall provide confidence that the concerned assets will function as intended in their environment of use.

A  Control Directive is a kind of Policy that provides recommendations on how to comply with Regulation Articles.

Once implemented,  Control Directives enforces any  Regulatory Framework your enterprise has to comply with.

Compulsory Policy, define by law, that is not directly enforceable whose purpose is guide enterprise activities.

 Regulation Articles are classified by Regulation section in the context of a Regulatory Framework.