CIPM Certified Information Privacy Manager All-in-One Exam Guide

APPENDIX A

The Risk Management Life Cycle

In this appendix, you will learn about

•   Risk management

•   Risk analysis

•   Risk treatment

•   Threats, vulnerabilities, and assets

•   Calculating risk

This appendix covers the risk management life-cycle process that is a vital part of any organization’s information security and privacy program. Although risk management is not a core part of the Certified Information Privacy Manager job practice, I have included it in this book because it is considered invaluable for the privacy and security professional. As a privacy professional, you may someday be responsible for privacy risk management, but regardless of your role in the organization, being familiar with risk management will give you additional ...