Risk management steps

1.Risk Identification

    + Identify and Evaluate Assets.

    + Identify Threats and Vulnerabilities

2.Risk Analysis

    + Qualitative vs. Quantitative

3.Risk mitigation/Response

    + Reduce

    + Accept

    + Transfer

    + Avoid

    + Reject

4.Ongoing controls Evaluation