One of the most common mistakes I see — across teams, in boardrooms, and even in risk registers — is confusing risk with risk factor. These two terms get thrown around as if they mean the same thing, but they don’t. And when we don’t distinguish between the two, our entire risk management effort gets blurry and shallow.