Basic Risk Management Process

1. 1. Risk Identification

1.1. Risk Type / Category

1.2. Likelihood / Impact

1.3. Risk Matrix

1.3.1. Risk Grade

2. 2. Risk Response Options

2.1. Options

2.1.1. Accept

2.1.2. Manage

2.1.3. Reduce / Transfer

2.1.4. Insure / Contingency Plan

2.2. Countermeasures

3. 3. Risk Register

3.1. Residual Risk

4. 4. Monitor & Review

4.1. Security Incident Logging

4.2. Intelligence