From the course: Building and Auditing a Cybersecurity Program

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Cyber risk management program for cybersecurity governance

Cyber risk management program for cybersecurity governance

From the course: Building and Auditing a Cybersecurity Program

Cyber risk management program for cybersecurity governance

- [Trainer] A common question most cybersecurity professionals get is, how would you secure each and every system in an organization? Well, it is not realistic to protect our systems equally. There are some real-life constraints like time and cost. Therefore organizations should focus efforts on the most critical assets, both in terms of systems and data, without losing an overall perspective of the entire business. This is where risk management comes in. Risk management is the holistic process of identifying, assessing, and making a strategy to mitigate risk to an acceptable level. The main goal of risk management is a reduction of probability or impact of risk that could negatively impact an organization. Businesses shouldn't expect to eliminate all risks. Rather, they should seek to identify and achieve an acceptable risk level for the organization. Let us start with the basic definition of terms to understand what risk…

Contents