Computer Science Homework Help

Risk Management

It is an accepted truth that without risk there can be no gain. Every individual and organization must take some risks to succeed. Risk management is not about avoiding risks, but about taking risks in a controlled environment. To do this, one must understand the risks, their triggers, and their consequences.

Write a 3–4 page paper in which you:

1. Define clearly risk management and information security, and discuss how information security differs from information risk management.

2. Explain security policies and how they factor into risk management. 

3. Describe at least two responsibilities for both IT and non-IT leaders in information risk management. 4. Describe how a risk management plan can be tailored to produce information system-specific plans.