Title: Chapter 4 Overview
Course: IN 2001 Principle of Information Assurance > Section: Module 4: Chapter Four

Risk Management

Introduction

As an aspiring information security professional, you will have a key role to play in risk management.  The IT community must serve the information technology needs of the broader organization and, at the same time, leverage the special skills and insights of the information security community.  The information security team must lead the way with skill, professionalism and flexibility as it works with the other communities of interest to appropriately balance the usefulness and security of the information system.

In the past, an organization could establish a competitive business model, method or technique to provide a product or service that was superior and create a competitive advantage.  What is becoming apparent is the problem of competitive disadvantage or the need to avoid falling behind the competition.

To keep up with the competition, organizations must design and create a safe environment in which business processes and procedures can function.  This environment must maintain the confidentiality, privacy and integrity of organizational data.  These objectives are met through the application of the principles of risk management.

An Overview of Risk Management

Risk Identification

Risk Assessment

Risk Control Strategies

Quantitative versus Qualitative Risk Control Practices

Risk Management Discussion Points

Recommended Risk Control Practices