| |
Steps In Risk Management Process
| Form a risk management team
| One from EDP/ADP/IRM/etc.
| User who knows what they can lose
| Could be formal or informal
| Depends on size of organization
| | | | |
| Identify and value the assets
|
| Identify potential threats (what could happen)
|
| Determine likelihood of occurrence of threats
|
| Calculate the exposures (the vulnerable areas and their values)
|
| Introduce safeguards
| for largest exposure first
| only when benefit exceeds cost | | |
|