Risk Management
A discussion of risk management concepts must first begin with defining the term risk management. The term risk is defined as the possibility that something unpleasant or unwelcome will happen. Put simply, risk management encompasses any of the myriad activities performed to control risk. This can seem like a very simple statement but, as you will see in this section, there is quite a bit covered under risk management.
At a bare minimum, risk management requires the identification of assets, determining the threats to said assets, the application of risk treatment, and the monitoring of treatment effectiveness. Entire books have been dedicated to this subject, and this is but a mere overview of risk management to provide you with a high-level understanding of the concepts. It is highly recommended that you explore these concepts in more detail to round out your cybersecurity knowledge of this foundational topic more thoroughly. The following section details how to...
