Risk management is the identification, assessment, and prioritization of risks Risk is a concept that denotes the precise probability of specific eventualities. Technically, the notion of risk is independent from the notion of value and, as such, eventualities may have both beneficial and adverse consequences. However, in general usage the convention is to focus only on potential negative impact to some characteristic of followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events.[1] Risks can come from uncertainty in financial markets, project failures, legal liabilities, credit risk, accidents, natural causes and disasters as well as deliberate attacks from an adversary. Several risk management standards have been developed including the Project Management Institute The Project Management Institute is a non-profit professional organization with the purpose of advancing the state-of-the-art of project management. The company is a professional association for the project management profession, the National Institute of Science and Technology The National Institute of Science and Technology is an engineering college in Pallur Hills, Orissa, India, 12 km from the city of Berhampur. It was started in 1996 by a few NRIs, some of whom belonged to Orissa. This institute was set up and is managed by the SM Charitable Educational Trust with the aim of promoting higher technical education, actuarial societies, and ISO standards.[2][3] Methods, definitions and goals vary widely according to whether the risk management method is in the context of project management, security, engineering, industrial processes, financial portfolios, actuarial assessments, or public health and safety.
For the most part, these methodologies consist of the following elements, performed, more or less, in the following order.
- identify, characterize, and assess threats
- assess the vulnerability of critical assets to specific threats
- determine the risk (i.e. the expected consequences of specific types of attacks on specific assets)
- identify ways to reduce those risks
- prioritize risk reduction measures based on a strategy
The strategies to manage risk include transferring the risk to another party, avoiding the risk, reducing the negative effect of the risk, and accepting some or all of the consequences of a particular risk.
Certain aspects of many of the risk management standards have come under criticism for having no measurable improvement on risk even though the confidence in estimates and decisions increase.[1]
PR Newswire (press release)
Syntex Management Systems, Inc. designs, develops, and delivers commercial software solutions for Operational and Enterprise Risk Management (ERM) in ...
and more »
