Last Updated on December 21, 2021 by InfraExam
In risk assessment, after the identification of threats to organizational assets, the information security manager would:
- evaluate the controls currently in place.
- implement controls to achieve target risk levels.
- request funding for the security program.
- determine threats to be reported to upper management.