Which item is correct about the relationship between the security risk management related term and its proper definition?