CISSP-ISSEP: Information Systems Security Engineering Professional

Risk management involves identifying risks and controlling them through appropriate treatment or mitigation measures. No system can be made entirely risk-free, and organizational data integrity is a security objective rather than a general risk-management task.