CISSP-ISSMP: Information Systems Security Management Professional

Major risk-management activities include risk identification—recognizing and assessing potential threats—and risk control, which applies measures to reduce, transfer, avoid, or otherwise manage risk. No system can be made entirely risk-free, and data integrity is a specific security objective rather than a general risk-management task.