Pa R T O N e

Risk Management
Business Challenges
Risk Management Fundamentals 2
Managing Risk: Threats,
Vulnerabilities, and Exploits

29

Managing Compliance 57
Developing a Risk Management Plan 85

CHaPTeR

Risk Management
Fundamentals

1

R

ISK MANAGEMENT IS IMPORTANT to the success of every company— a company that takes no risks doesn’t thrive. On the other hand, a company that ignores risk can fail when a single threat is exploited.
Nowadays, nformation technology (IT) systems contribute to the success i of most com anies. If you don’t properly manage IT risks, they can also p contribute to your company’s failure.
Effective risk management starts by understanding threats and vulnerabilities.
You build on this knowledge by identifying ways to mitigate the risks. Risks can be mitigated by reducing vulnerabilities or reducing the impact of the risk.
You can then create different plans to mitigate risks in different areas of the company. A company typically has several risk mitigation plans in place.
Risk management is presented in three parts in this textbook. Part 1 is titled
“Risk Management Business Challenges.” It lays a foundation for the book, with definitions of many of the terms and techniques of risk management. It finishes with details on how to develop a risk management plan. Part 2 is titled “Mitigating Risk.” This section covers risk assessments. Once you identify risks, you can take steps to reduce them. It ends with methods for turning a risk assessment into a risk mitigation plan. Part 3 is titled “Risk Management Plans.”
Here you learn how to create and implement several different plans, such as the business continuity plan and the disaster recovery plan.
This book can help you build a solid foundation in risk management as it relates to information system security. It won’t