Steps In Risk Management Process

Form a risk management team

One from EDP/ADP/IRM/etc.
User who knows what they can lose
Could be formal or informal
Depends on size of organization

Identify and value the assets

Identify potential threats (what could happen)

Determine likelihood of occurrence of threats

Calculate the exposures (the vulnerable areas and their values)

Introduce safeguards

for largest exposure first
only when benefit exceeds cost

Previous slide Next slide Back to first slide View graphic version