The incident impacted elements are a subpart of the risk's scope. The incident causes and consequences are a subpart of the risk's ones. But the incident scope (processes, entities etc.) are not filtered within the scope of the risk connected to the incident, because the link between risk and incident isn't always done.