Glossary
Where to find definitions of the TPRM, privacy, and cyber risk terms used across the platform.
Why it exists
Risk management is a discipline with a lot of vocabulary and little standardization. RTO, RPO, MTPD, inherent, residual, appetite, tolerance, controller, processor — terms that appear across different standards with definitions that do not quite match.
The glossary exists so a team uses the words with the same meaning the platform uses. It is available from inside the product and also open to the public.
The meaning that applies here
When a term has more than one possible reading across standards, the glossary records which one Aranis adopts in its calculations. That matters more than it seems: inherent and residual risk, for instance, mean slightly different things in different frameworks, and the difference changes the number.
Where a definition has direct consequence in the calculation, the corresponding methodology article goes further — the glossary gives the meaning, the methodology gives the formula.
How to get there
The glossary sits in the product's side menu and is also publicly available on the Aranis website, in whichever language you are using. Being public is deliberate: it serves your team as much as the supplier who received a questionnaire and hit a term they do not know.