...activities working closely with bureau and system-level activities. (800-143.2) 3. Risk Management Risk management is the process of assessing risk,...acceptable level and maintaining that level of risk. (800-14 3.3) 4. Lifecyde Planning Security, like other aspects of an IT system, is best managed if...

...program. What is risk management? The General Accounting Office (GAO) has a good, high-level definition: risk management is the process of assessing risk,...acceptable level, and maintaining that level of risk. There are four basic principles of effective risk management. Assess Risk and Determine Needs. Your...

...Assessment Paradigm MANAGEMENT CONTROLS OPERATIONAL CONTROLS Technical Threats CONCLUSION INTRODUCTION "Risk management is the process of assessing risk,...an acceptable level, and maintaining that level of risk."1 This chapter extends our risk management exercise into the area of reducing converged ICT risks...