CISSP-ISSMP: Information Systems Security Management Professional

Risk management identifies and assesses risks, including the potential impact of threats, and selects appropriate risk-reducing countermeasures using cost-benefit considerations. Identifying an accused individual belongs to investigation or incident response rather than risk management.