Risk

Origin domain

Information Theory

Subdomain

decision theory → Information Theory

Also from

Economics & Finance, Engineering & Design

Aliases

Hazard Exposure

Core Idea

Risk is exposure to a quantifiable distribution of possible outcomes that includes adverse ones — uncertainty rendered measurable and attached to stakes. Its defining structure has two parts that must co-occur: a probability assignment over outcomes (so the unknown is characterizable, not merely unknown) and a valuation that marks some outcomes as harmful. This is the Knightian fork: where probabilities are assignable we have risk; where they are not we have uncertainty. Risk is therefore the bridge object on which expectation, variance, and decision rules can operate.

How would you explain it like I'm…

Maybe-Bad with Odds

Risk is when something might go wrong AND you can guess how likely it is. If you flip a coin to see who eats the last cookie, you know there's a 50/50 chance of losing — that's risk. If you just feel scared of monsters under the bed with no way to measure it, that's not risk, just worry.

Measurable Risk

Risk has two parts that have to go together. First, you need to be able to say how likely different outcomes are — like 'there's a 1 in 6 chance of rolling a one.' Second, some of those outcomes have to be bad — losing money, getting hurt, missing the bus. If you only have probabilities but nothing is bad, it's just statistics. If something feels scary but you can't say how likely it is, that's uncertainty, not risk. Risk is measurable maybe-badness.

Risk

Risk is exposure to a measurable spread of possible outcomes when some of those outcomes count as losses. Two ingredients have to meet: a probability distribution over what might happen, and a value judgment that flags certain outcomes as harmful. The economist Frank Knight (1921) drew a sharp line between risk — where you can assign probabilities — and uncertainty, where you genuinely cannot. That line matters because risk lets you do math: compute expected values, variances, insurance premiums, hedge ratios. Pure uncertainty doesn't. Risk is the bridge that turns 'something bad might happen' into a thing you can price and manage.

 

Risk is exposure to a *quantifiable* distribution of possible outcomes that includes adverse ones — uncertainty rendered measurable and attached to stakes. The defining structure requires two co-occurring elements: (1) a probability assignment over outcomes (the unknown is characterizable, not merely unknown), and (2) a valuation that marks some outcomes as harmful relative to a stakeholder's preferences. This is Knight's (1921) fork between *risk* (probabilities assignable) and *uncertainty* (probabilities not assignable). The two-part structure is essential: a probability distribution alone is mere description; stakes alone without probabilistic characterization remain inert dread. Their conjunction — characterizable likelihood meeting valued consequence — is what makes risk the operand on which expected-utility calculations, variance measures, and decision rules (max-expected-utility, mean-variance optimization, VaR) can operate.

Broad Use

• Finance: return variance and downside measures (VaR) quantify exposure that must be priced and hedged.
• Engineering / safety: risk = probability of failure × severity of consequence, the basis of reliability and safety-case reasoning.
• Epidemiology (non-obvious): relative and absolute risk quantify the probabilistic excess of disease attributable to an exposure across a population.
• Insurance: actuarial risk is the modeled loss distribution that premiums must cover.
• Project management: risk registers enumerate adverse contingencies with likelihood and impact so they can be ranked and mitigated.

Clarity

Naming risk as quantified-exposure-with-stakes separates it sharply from bare uncertainty: risk is something you can put a number on and price, whereas uncertainty is the regime where you cannot. It lets practitioners say that two situations carry the same uncertainty but very different risk because the stakes differ, and that converting uncertainty into risk (by estimating probabilities) is itself a consequential analytic move.

Manages Complexity

Risk compresses a cloud of possible futures into a manageable object — a probability-weighted outcome distribution — on which expectation, variance, and worst-case bounds can be computed and compared. It makes otherwise incommensurable threats rankable on a common scale of likelihood and consequence.

Abstract Reasoning

Once a situation is framed as risk, the entire apparatus of expected value, mean–variance trade-off, hedging, pooling, and aversion becomes applicable. It also exposes the danger of false precision: treating genuine (unquantifiable) uncertainty as if it were risk by assigning spurious probabilities.

Knowledge Transfer

The engineering decomposition risk = likelihood × severity transfers to cybersecurity, public health, and project planning as a portable prioritization rule. Conversely, the financial insight that risk can be pooled and diversified transfers to insurance and to portfolio-style management of any independent-exposure population.

Relationships to Other Abstractions

Current abstraction Risk Prime

Parents (2) — more general patterns this builds on

• Risk is a kind of Uncertainty Prime

  Risk is a specialization of uncertainty; it is the case where the unknown distribution has been quantified and attached to stakes.

• Risk presupposes Probability Prime

  Risk presupposes probability because risk requires an assignable distribution over outcomes that turns mere unknowing into something measurable.

Children (14) — more specific cases that build on this

• Grey Swan Domain-specific is a kind of Risk

  A Grey Swan is risk specialized to a rare, high-consequence event foreseeable in category but uncertain in timing, magnitude, and exact form.

• Contraindication Domain-specific presupposes Risk

  Contraindication presupposes Risk because its trigger is defined by a context- specific probability-and-severity shift that reverses expected net benefit.

• Diversification Prime presupposes, typical Risk

  Operates to reduce the variance of a total outcome over multiple exposures, each with its own uncertainty; presupposes risk (a known distribution of outcomes to manage).

• Exposure Creep Prime presupposes Risk

  Exposure Creep presupposes Risk, whose structure must already obtain for the child mechanism to be meaningful or operational.

• Exposure Pathway Prime presupposes, typical Risk

  Exposure Pathway typically presupposes Risk, whose structure must already obtain for the child mechanism to be meaningful or operational.

▸ Show 9 more

Hierarchy paths (3) — routes to 3 parentless roots

• Risk → Uncertainty

Show alternative paths (2)

Not to Be Confused With

• Risk is not uncertainty because risk is the regime where outcomes carry assignable probabilities and stakes, whereas uncertainty is the regime where probabilities cannot be assigned (the Knightian distinction).
• Risk is not risk_return_tradeoff because the trade-off is the relationship between borne risk and expected reward, whereas risk is the underlying exposure object that the trade-off relates to return.
• Risk is not risk_aversion because aversion is an agent's preference over risk, whereas risk is the structural feature of the situation the preference responds to.