Risk Management
Show 56 more topics
- Enterprise
- Partnership
- Attack
- Automation
- Monitoring
- Protection
- Vulnerabilities
- Application
- Authorization
- Data Center
- Inference
- Leadership
- Market
- Networking
- Observability
- AI Agents
- AI-Driven
- Asset Discovery
- Attack Surface Monitoring
- Certification
- Cloud
- Cloud Native
- Connectivity
- Continuous Compliance
- Core Network
- Edge
- Fabric
- Generative AI
- Mergers and Acquisitions
- Microsegmentation
- Operational technology
- Power
- Privacy
- Quantum
- Satellite
- SecOps
- Services
- Silicon
- Space
- Test Access Points
- Threat Intelligence
- 800-53
- AI Governance
- AI Infrastructure
- AI Native
- Anomaly Detection
- Authentication
- Backup
- Bridge
- Business Operations
- Control Plane
- Coolant Distribution Unit
- Digital Twin
- DPU
- FALCON
- Federal Risk and Authorization Management Program
161 organizations in our directory are tagged Risk Management, referenced across 27 articles and 1 open source project.
What is Risk Management?
Risk management is a structured process that identifies, analyzes, evaluates, treats, monitors, and communicates risk to achieve defined objectives and stay within an organization’s risk appetite and regulatory obligations.
Expanded Explanation
1. Technical Function and Core Characteristics
Risk management is a governance and control discipline that uses systematic methods to identify, analyze, evaluate, and treat uncertainty that can affect objectives. It covers threats, vulnerabilities, likelihood, and consequences across financial, operational, strategic, safety, and information domains.
Show more
Formal risk management frameworks define steps such as context establishment, risk identification, qualitative and quantitative assessment, risk evaluation against tolerance thresholds, and selection of responses such as avoidance, mitigation, transfer, or acceptance. The discipline also includes continuous monitoring, assurance, and communication of risk information to stakeholders.
2. Enterprise Usage and Architectural Context
Enterprises embed risk management into governance structures, policies, and control frameworks for areas such as cybersecurity, data protection, business continuity, third-party management, and regulatory compliance. It aligns with internal control systems, audit programs, and enterprise performance management.
Architecturally, risk management integrates with Security Information and Event Management (SIEM), identity and access management, data protection platforms, cloud management, and IT service management tools. Organizations use it to inform architecture decisions, control selection, investment prioritization, and assurance over technology services and supply chains.
3. Related or Adjacent Technologies
Risk management relates to frameworks and standards such as ISO 31000, the NIST Risk Management Framework (RMF), Committee of Sponsoring Organizations (COSO) Enterprise Risk Management, and sector-specific regulatory requirements. These define common terminology, process steps, and documentation practices for enterprise programs.
Adjacent domains include Governance, Risk, and Compliance (GRC) platforms, internal controls management, cyber risk quantification, business continuity and Disaster Recovery (DR) planning, incident management, and Security Operations (SecOps). These domains use risk data and assessments to configure controls, workflows, and reporting.
4. Business and Operational Significance
Risk management supports decision-making by providing structured analysis of adverse events, their likelihood, and their potential consequences on objectives, finances, operations, and reputation. It enables organizations to prioritize controls and resources based on documented risk criteria and appetite.
In regulated environments, risk management underpins compliance with supervisory expectations for operational resilience, information security, privacy, and financial stability. It also provides a basis for assurance to boards, regulators, customers, and partners through documented risk registers, metrics, and reports.
Our definition.
