Once a risk is identified and analyzed, we need to manage it. Let's take the following case: Suppose your company has a data center in Florida, USA. A hurricane may hit the region where the data center is located. The probability that it hits your data center is 20% (note: the probability that it does NOT damage the data is 80%). If it hits your data center, you will incur $1,000,000 in damages. How do you manage this risk?