Risk communication is part of risk management

Likelihood and impact are only half of a risk process. The other half is whether a non-specialist can use the result. Boards, operators, and policy clients do not share a threat-intel dialect.

Communication is not decoration after the matrix is filled in. The taxonomy, the color, the sentence that names residual risk—those choices change what gets escalated. Poor framing hides concentration; clear framing makes trade-offs visible.

I treat the write-up as part of the method: a shared language, stated assumptions, and an action that matches urgency. If the audience cannot repeat the decision question, the analysis is not finished.