Ciklus Upravljanja Rizicima
Svaki posao nosi rizik. Cilj nije eliminisati sve rizike (to je nemoguće), već ih svesti na prihvatljiv nivo.
Okviri Koje Koristimo
- ✅ NIST RMF (National Institute of Standards and Technology)
- ✅ ISO/IEC 27005 (Information Technology Risk Management)
- ✅ OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation)
Proces
Identification ➝ Analysis ➝ Evaluation ➝ Treatment ➝ Monitoring