Glossary: Policies, Standards and Risk Management

risk identification

Finding and describing the risks an organization faces before they cause harm. Sources include the asset list, scans, advisories, past incidents and staff interviews.