# Cyber risk 101

Date: 2023-02-15

# Risk management
A short recap about risk management in general.
Any risk management is based on four functions -
1. Identification
2. Assessment
3. Mitigation
4. Monitoring

## Identification - 
1. Start with assets list
2. Find wath threat those assets

## Assessment -
Give a dollar value to each risk Multiplky by chance for that risk to happen

## Mitigation -
What are we going to do to protect this asset 
1. Reduce probabilty
2. Avoid
3. Transfer
4. Accept
5. Reject <- here you're open for responsability because you knew it, and did nothing.

## Monitoring - 
KPIs & Re-evaluations