Reference no: EM133465005

Question

Risk management. Everyone knows about it, nobody does it correctly. Now it is your turn to give advice on what risk management is and how companies need to do it. Make sure to cover areas like why we do it; how it fits into cybersecurity management; the role of CISOs in risk management; risk assessment vs. risk treatment; residual risk vs. risk appetite; qualitative vs. quantitative assessment; and other areas you see fit.

At the end, give advice on access control and encryption as two common controls that may be implemented during the risk management process - what are these, where do we use each control, do they do the same thing or different things, do we need both or one in general, and other information as you see fit.