I’ve noticed that the phrase “real risk” has been in use to mean a number of different things. I write about this in the July @ISACA column.