Information Security Handbook - Second Edition

4

Information Security Risk Management

This chapter will discuss information security risks, beginning with a review of the foundational concepts, which will lead to a detailed understanding of risk ownership and management. It will offer insights into identifying and safeguarding your organization’s vital data and provide guidelines for conducting risk assessments. We will explore the significance of information classification and the steps involved in the data classification process. Drawing on these building blocks, we will discuss establishing impact, choosing suitable security controls, and calculating risk using qualitative and quantitative assessments.

The following topics will be covered in this chapter:

• What is information security ...