Add Risk Management concepts from ISO 31000 series

[coolharsh55]

The DPV-Risk extension https://w3id.org/dpv/risk lists risk assessments, consequences, impacts, methodologies, matrices, etc. But does not refer to other concepts in risk management (criterias, governance, sources, threats, evaluation, etc.) These should be added.

1. RiskManagement
2. RiskAssessment
3. RiskIdentification
4. RiskAnalysis
5. RiskEvaluation
6. RiskAcceptance
7. ThreatIdentification
8. ThreatEvaluation
9. RiskMitigation
10. RiskControlAssessment
11. RiskTreatment
12. RiskPerception
13. RiskCriteria
14. Risk Source
15. RiskThreat
16. RiskOwner

[coolharsh55]

Update from today's meeting https://www.w3.org/2022/12/14-dpvcg-minutes.html where we agreed to provide these concepts in the risk extension.

[ghurlbot]

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org:

discussing what concepts should be present to represent causes of risks, and whether to have 1 cause or 2 causes (cause of cause) ; require examples to see these in action and to discuss further.

[ghurlbot]

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org

the risk assessment concepts in #104 are likely to be accepted - this work should be modified to build on them.

[coolharsh55]

We have added the following in v2.1:

• RiskManagement
• RiskAssessment
• RiskAnalysis

The following are proposed to be discussed for v2.2:

• RiskIdentification
• RiskEvaluation
• RiskAcceptance
• RiskTreatment
• RiskPerception
• RiskCriteria
• RiskOwner