Business Atlas

How Enterprise Is Built
Sign In
Text size
100%
Theme

Switch Atlas

Practice Discipline

Risk Management

Risk management is defined in several consistent ways in the NIST Computer Security Resource Center glossary. The NIST Cybersecurity Framework Version 1.1 and the NIST Privacy Framework Version 1.0 call it the process of identifying, assessing, and responding to risk. NIST SP 800-160 Volume 1, drawing on ISO Guide 73, defines it as coordinated activities to direct and control an organization with regard to risk. An older NIST report, NISTIR 4734, describes it as the total process of identifying, controlling, and eliminating or minimizing uncertain events that may adversely affect system resources.

Facts
Discipline Scope
Methods, definitions and goals of risk management vary widely according to whether it is practiced in the context of project management, security, engineering, industrial processes, financial portfolios, actuarial assessments, or public health and safety. 1
Connections

Associated With

Equifax Data Breach, Corporate Events
Source Wikipedia, Risk management
Sony PlayStation Network Data Breach, Corporate Events
Source Wikipedia, Risk management
Sources
1. Wikipedia, Risk management
  • Wikipedia, lead section, scope sentence
    Methods, definitions and goals vary widely according to whether the risk management method is in the context of project management, security, engineering, industrial processes, financial portfolios, actuarial assessments, or public health and safety.
  • Associated With: Equifax Data Breach, Classified by subject-matter domain of the corporate event (w-bbfill-business-other-0926); cites the discipline definition.
  • Associated With: Sony PlayStation Network Data Breach, Classified by subject-matter domain of the corporate event (w-bbfill-business-other-0926); cites the discipline definition.
View the Source
Risk Management, NIST Computer Security Resource Center Glossary
Glossary entry Risk Management, definition from NIST Cybersecurity Framework Version 1.1
Quote, Glossary entry Risk Management, definition from NIST Cybersecurity Framework Version 1.1
The process of identifying, assessing, and responding to risk.
View the Source
Comments (0)
No comments yet. Be the first to share a thought.
Reader Challenges (0)
No disputes yet. Spotted an error or a better source? Open the first one.