As information security professionals, risk evaluation and mitigation are the key parts of our job. Dealing with risk is the theme of our roles, be it as firewall engineers, auditors, penetration testers, management, etc.The key functions of the Security and Risk Management domain are risk analysis and mitigation as well as ensuring the best organizational structure for a robust information security system is in place. In this area of expertise, it's the quality of the people that can make or break an organization. By "quality of the people", we mean knowledgeable and experienced staff with supportive as well as vested leadership are of the highest quality. In order to learn and know more about this subject, Grab this book Now!