Explanation
A pure risk only leads to the possibility of a loss, whereas a speculative risk may lead to a gain12. For example, entering into a contract to purchase a new factory is a speculative risk, as it could result in either profit or loss depending on market conditions.

Explanation
Risk management is a process with inputs, activities, and outcomes1. The inputs are the organization's context and risk criteria. The activities are risk identification, analysis, evaluation, and treatment. The outcomes are improved decision making, performance, and resilience.

Explanation
A review of the goals and objectives of the risk strategy is part of defining the success measures for the organization's risk strategy1. This helps to ensure that the risk strategy aligns with the organization's purpose, vision, mission and values.

Explanation
People processes and hard processes are two types of integrated processes3. People processes involve human factors such as culture, values, ethics, and behavior that influence risk management. Hard processes involve technical aspects such as methods, tools, techniques, and systems that support risk management.

Explanation
According to 2, FIRM scorecard is "a tool for measuring risk performance". It uses four dimensions: financial impact, internal processes, reputation and market position (FIRM). Loss of income and financial gain are examples of financial impact risks that can be quantified using monetary values or ratios. Reputational damage is an example of reputation risk that is more difficult to quantify using objective measures.