Explain why risk identification, through a listing of assets and their vulnerabilities, is so important to the risk management process
Explain why risk identification, through a listing of assets and their vulnerabilities, is so important to the risk management process
Research each one of the following standards for implementing Risk Management Models: NIST SP 800-39, NIST SP 800-37, ISO 27005:2011, and ISO 27005:2011. Recommend a model for organizations that do not have a risk management program in place. Explain why risk identification, through a listing of assets and their vulnerabilities, is so important to the risk management process.
