Risk Assessment & Management

Summary

Systematically identifying, evaluating, and prioritizing security risks based on likelihood and impact — the foundation for deciding where limited security budget and effort should actually go.

• 1Build a simple risk matrix (likelihood x impact) and plot 5 hypothetical risks on it.
• 2Learn the difference between risk avoidance, mitigation, transfer, and acceptance.
• 3Practice justifying why a specific risk should (or shouldn't) be prioritized for remediation.