The importance of managing risk cannot be over emphasized. There is no such thing as having a 100% solution to securing your network. Given the fact that no organization has an unlimited amount of money and personnel that they can apply to securing the network, there is a level of risk that must be accepted. This is a balance of the type and sensitivity of the information being secured and the amount of resources available to apply to securing it.

1. Identify and discuss the three primary areas of information security risk management.

2. Since we must apply resources to each, what is the value that each brings to the organizations successful security implementation?