Source: CMP Media
Risk management enables sound judgment when taking risks, and affords a level of contingency planning should a risk become a reality. Understanding the risks to company assets is the starting point of a risk-management process. Once you understand the risks to your business, you'll be able to make sound decisions on whether to accept, mitigate or transfer those risks. In addition, risk management pulls together data from other security areas, such as vulnerability analysis and operations monitoring, to provide an overall view of business risk. The focus of this discussion is the application of techniques for risk management and risk assessment to modern information-security practices.