02. Managing and Prioritizing Risks
ND545 C3 L1 A02 Big Picture
Cyber security is ultimately about managing and prioritizing risks. A standard risk management process involves three key steps:
- Identifying
- Assessing
- Mitigating risks
Identifying risks involves understanding the threats the company faces. Threat assessment sets the foundation and is one of the first required steps in the risk management process.