From the course: CISSP Cert Prep (2021): 1 Security and Risk Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Risk management

Risk management

From the course: CISSP Cert Prep (2021): 1 Security and Risk Management

Start my 1-month free trial

Risk management

- [Tutor] Once you complete a risk assessment for your organization, you're left with a prioritized list of risks that require your attention. Risk management or risk treatment is the process of systematically analyzing potential responses to each risk and implementing strategies to control those risks appropriately. No matter what risk you're managing, you have four basic options for addressing the situation. You can perform risk avoidance, risk transference, risk mitigation, or risk acceptance. Now, when you avoid a risk, you change your organization's business practices so that you're no longer in a position where that risk can affect your business. Earlier, we performed a risk assessment of the risk that flooding pose to an organization's data center. If we chose to pursue a risk avoidance strategy for that risk, we might relocate the data center to a facility where there is no risk of flood damage.…

Contents