| |
Steps In Risk Management Process
 | Form a risk management team
 | One from EDP/ADP/IRM/etc.
 | User who knows what they can lose
 | Could be formal or informal
 | Depends on size of organization
| | | | |
 | Identify and value the assets
|
 | Identify potential threats (what could happen)
|
 | Determine likelihood of occurrence of threats
|
 | Calculate the exposures (the vulnerable areas and their values)
|
 | Introduce safeguards
 | for largest exposure first
 | only when benefit exceeds cost | | |
|