View source for Risk Management

{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
|-
| '''1.''' Risk Management or RM is the ongoing process of assessing the risk to mission/business as part of a risk-based approach used to determine adequate security for a system by analysing the threats and vulnerabilities and selecting appropriate, cost-effective controls to achieve and maintain an acceptable level or risk.

{{Template:BL-OR-5 banner}}

[[File:ISO31000 Risk Management Process.png|thumb|left|300px|ISO31000 Risk Management Framework]]
<br>
'''Note''': 
<br>
'''Related Terms''': [[Risk_Likelihood|Risk Likelihood]], [[Risk_Impact|Risk Impact]], [[Risk_Level|Risk Level]], [[Risk_Rating|Risk Rating]], [[Risk_Treatment|Risk Treatment]], [[Risk_Assessment|Risk Assessment]].
<br><br>
{{Template:BCM Course}}
<br><br>
{{BcmBoK 2 CL 2B}}
<br><br>
{{BcmBoK 2 CL 2C}}
<br><br>
{{BcmBoK 2 CL 2D}}
<br><br>

{{Template:BLCoursesBanner}}
{{Bcm Institute Source}}
|}

'''2.''' Coordinated [[Activity|activities]] to direct and control an [[Organization|organization]] with regard to [[Risk|risk]].

{{Source: ISO Guide 73}}

{{ISO 22301 Source}} - clause 3.51

'''3.''' Structured development and application of management culture, policy, procedures and practices to the tasks of identifying, analysing, evaluating, and controlling responding to risk. 
{{NCEMA 7000 Source}}


'''4.''' Coordinated activities to direct and control an organization with regard to risk.
{{Template:BookPSRARLeft}}
'''Notes (1)''': Risk management generally includes [[Risk_Assessment|risk assessment]], [[Risk_Treatment|risk treatment]], [[Risk_Assessment|risk acceptance]] and [[Risk_Communication|risk communication]].

{{ISO 22399 Source}} - clause 3.38
{{Template: BookMGBCMResponse}}
'''5.''' Coordinated activities to direct and control an organization with regard to risk (2.1). 
[ISO Guide 73:2009, definition 2.1]

{{ISO 31000 Source}} - clause 2.2


'''6.''' Structured development and application of management culture, [[Policy|policy]], [[Procedure|procedures]] and practices to the [[Task|tasks]] of identifying, analyzing, evaluating, and controlling responding to [[Risk|risk]]

{{BS25999 Source}}

'''7.''' The culture, [[Process|processes]] and structures that are put in place to effectively manage potential opportunities and adverse effects. As it is not possible or desirable to eliminate all [[Risk|risk]], the objective is to implement cost effective [[Process|processes]] that [[Reduce|reduce]] [[Risk|risks]] to an acceptable level, reject unacceptable [[Risk|risks]] and treat [[Risk|risk]] by financial interventions i.e. transfer other [[Risk|risks]] through insurance or other means, or by organisational intervention i.e. [[Business_Continuity_Management_(BCM)|BCM]]. 
{{BCI Source}}

'''8.''' The culture,processes and structures that are directed towards realising potential opportunities while managing adverse effects.

{{HB221 Source}}

'''9.''' The culture, processes and structures that are directed towards the effective management of potential opportunities and adverse effects. 
{{HB292 Source}}


'''10.''' The identification,selection and adoption of countermeasures justified by the identified risks to assets in terms of their potential [[Impact|impact]] upon services if failure occurs,and the reduction of those risks to an acceptable level.

{{ITIL Source}}



[[Category:BCM Institute Glossary]] [[Category:BCM Institute Cyber Security Glossary]] [[Category:BcmBoK 2 CL 2]] [[Category:BcmBoK 2 CL 4]] [[Category:BcmBoK 2 CL 2C]]