Risk Defined
The ultimate goal of a security program is risk management and mitigation.
In its broadest sense, risk can be defined as the likelihood of loss of anything having value, including people, facilities, information, equipment, and reputation. In a sense specific to security and loss prevention, risk is the probability that a particular threat will exploit a given vulnerability, leading to an unwanted result.
As the business terrain continues to evolve, increased business risks and changing risk profiles create the need for organizations to continuously improve their ability to identify and manage these risks.