The likelihood of an incident, the cost of deploying additional security controls, and the probability of a vulnerability being activated as a security incident

What is typically involved in risk management?

Identifying, assessing, and mitigating risk to protect mission-essential functions

Study Notes

Risk management requires identifying mission-essential functions and vulnerabilities, identifying threats, analyzing business impacts, and identifying risk response options.
The key factors used to assess risk include the likelihood of a vulnerability being activated as a security incident, the impact of that incident, and the cost of deploying additional security controls.
Risk management typically involves identifying, assessing, and mitigating risk to protect mission-essential functions.

Test your knowledge of risk management fundamentals, including identifying vulnerabilities, assessing risk factors, and mitigating potential threats to protect mission-essential functions.