From the course: IT Security Foundations: Core Concepts

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Managing risk

Managing risk

- [Instructor] In any organization, reducing overall risk is an important exercise. Risk is when a person, place, or thing is open or exposed to harm and this can result in injury, death, or destruction. When dealing with risk, potential issues are evaluated that could negatively impact the business. The goal is to reduce risk to protect assets which are tangible and intangible items that can be assigned of value. Now, tangible assets are anything that you can touch such as a computer or a printer. Intangible assets are just as important and they include things such as trade secrets, databases, and company records. Risk is a function of a threat exploiting a weakness or vulnerability according to a formula. Risk equals threats times vulnerabilities. A couple of key concepts, threats may exist, but if there is no vulnerability, there will be no risk. In addition, if there is a vulnerability but no threat, there will be…

Contents