Difference between revisions of "Risk Management"
From MgmtWiki
(→Context) |
(→Context) |
||
| Line 2: | Line 2: | ||
Most of life is simply [[Risk Management]], It is essential to survival of any organization even though it is not the primary goal, it is the bedrock of continued existence. | Most of life is simply [[Risk Management]], It is essential to survival of any organization even though it is not the primary goal, it is the bedrock of continued existence. | ||
==Context== | ==Context== | ||
| − | Risk Management consiste of risk evaluation based on assets that need protection. In any transaction there are at least two points of view, that of each party to the transaction, For identity risk management we will be addressing the POV of the user and of the web site, also known (in the GDPR) as the [[Principal] and the [[PII Controller]]. | + | Risk Management consiste of risk evaluation based on assets that need protection. In any transaction there are at least two points of view, that of each party to the transaction, For identity risk management we will be addressing the POV of the user and of the web site, also known (in the GDPR) as the [[Principal]] and the [[PII Controller]]. |
* [[Threat Model]] provides the core data needed for security risk analysis. | * [[Threat Model]] provides the core data needed for security risk analysis. | ||
* [[Privacy Risk]] | * [[Privacy Risk]] | ||
Revision as of 10:24, 29 September 2020
Full Title
Most of life is simply Risk Management, It is essential to survival of any organization even though it is not the primary goal, it is the bedrock of continued existence.
Context
Risk Management consiste of risk evaluation based on assets that need protection. In any transaction there are at least two points of view, that of each party to the transaction, For identity risk management we will be addressing the POV of the user and of the web site, also known (in the GDPR) as the Principal and the PII Controller.
- Threat Model provides the core data needed for security risk analysis.
- Privacy Risk
- Conduct Risk
