Implementing an Information Security Management System: Security Management Based on ISO 27001 Guidelines

© Abhishek Chopra, Mukund Chaudhary 2020

A. Chopra, M. ChaudharyImplementing an Information Security Management Systemhttps://doi.org/10.1007/978-1-4842-5413-4_5

5. Risk Management Approach

Abhishek Chopra¹  and Mukund Chaudhary²

(1)

Faridabad, Haryana, India

(2)

Noida, India

 

“If you don’t invest in risk management, it doesn’t matter what business you’re in, it’s a risky business.”

—Gary Cohn

The previous chapter discussed how to conduct a risk assessment exercise and give a risk assessment report presentation. This chapter discusses the approach to be followed for managing the risks identified during the risk assessment exercise. This chapter will also focus on identifying assets and applying security controls.

Defining and Finalizing the Risk Assessment ...