A wise philosopher once said that the limits of language reflect the limits of our understanding. That is, if we can't assign words to a phenomenon, then we don't truly understand it. A similar situation exists in the discipline of information security and risk management: assigning inexact words means we can't truly manage it. Terms to describe specific phenomena in this discipline are used loosely or interchangeably with others. Out of a kind of verbal promiscuity, confusion is sewn.