Risk Management Framework

Chapter 3

Integrated Organization-Wide Risk Management

Abstract

This chapter introduces the holistic, organization-wide risk management process.

Keywords

risk management

organization risk management

NIST SP 800-30

NIST SP 800-39

risk acceptance

Table of Contents

Chapter Overview and Key Learning Points

Risk Management

Risk Management and the RMF

Components of Risk Management

Framing the Risk

Risk Assessment

Risk Response

Monitoring Risk

Multi-tiered Risk Management

Tier 1, Organizational Risk Management

Tier 2, Mission/Business Processes

Tier 3, Information System

Risk Executive (Function)

Information in this Chapter:

• How risk management integrates with the RMF

• The multi-tiered risk management process

• Introduction to the components ...