Risk management activities: impact analysis, risk assessment, risk appetite and tolerance, risk treatment and risk registers

Risk is the chance that a threat will exploit a vulnerability and cause harm to an asset, weighed by the impact if it happens. Risk management is the repeating cycle of identifying risks, assessing them, deciding what to do, and monitoring the result. SecurityX expects you to lead this cycle and communicate it to leadership.