Risk management

Risk management is the identification, assessment, and prioritization of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

• identify, characterize threats
• assess the vulnerability of critical assets to specific threats
• determine the risk (i.e. the expected likelihood and consequences of specific types of
• attacks on specific assets)
• identify ways to reduce those risks
• prioritize risk reduction measures based on a strategy