IT Risk Fundamentals

The cost of a response and the organization’s capability to implement and maintain it determine whether the response is feasible and appropriate. Risk-response selection considers projected response cost alongside the organization’s capacity to carry out the chosen treatment.