Basic Risk Management Process

1. 1. Risk Identification

1.1. Risk Type / Category

1.2. Likelihood / Impact

1.3. Risk Matrix

1.3.1. Risk Grade

2. 4. Monitor & Review

2.1. Security Incident Logging

2.2. Intelligence

3. 2. Risk Response Options

3.1. Options

3.1.1. Accept

3.1.2. Manage

3.1.3. Reduce / Transfer

3.1.4. Insure / Contingency Plan

3.2. Countermeasures

4. 3. Risk Register

4.1. Residual Risk