Risk assessment: The overall process of identifying, analyzing, and evaluating risks. It involves the estimation of the risk’s likelihood and the magnitude of its impact and is an integral part of the risk management process. The objective of risk assessment is to enable the organization to decide whether the risk is acceptable or whether it is severe enough to warrant treatment or mitigation measures.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index