Relationship Between Risk Analysis, Risk Assessment, And Risk Management (SP 800-30)

In this video we discussed the relationship between Risk Analysis, Risk Assessment, and Risk Management as it relates to cybersecurity leveraging the NIST SP 800-30.

***Risk Analysis***: This is the practice of brainstorming and listing all the possible Threat Events that can occur within a system or a process.

***Risk Assessment***: This is the process of determining the likelihood of these risk factors occurring and their Impact to an organization and putting them in a report.
(This is all about measuring and prioritizing risks so that risk levels are management within defined tolerance thresholds without being overcontrolled or forgoing desirable opportunities).

***Risk Management***: This is the process of making and carrying out decisions that will minimize the adverse effects of risk on an organization. (The results of the risk assessment process then serve as the primary input to risk responses whereby response options are examined (accept, reduce, Transfer, or avoid), cost-benefit analyses performed, a response strategy formulated, and risk response plans developed.)

******See my Patreon page for access to the Risk Assessment Template used in the video**********

The free way to help the channel grow is by subscribing using the link below:

*************Patreon & Channel Support*******************

********Order your KamilSec (KS) Designs Merch:**********

**************************************************************

CashApp: $Kamilzak

Thank You!!!
*************************************************************

Connect with me on Social Media:
Instagram: @Kamilzak1

[jackieo]

Perfect! very crisp and clear - thanks for posting!!!!

[doyinsolaphilips]

I’ve never commented on any YT videos, I just have to give you your flowers man. You the best THANK YOU!!!

[leviteshouse]

I can't stop watching your videos? So detailed and explanatory
Thank you, Prof Kamil

[leilafofana]

This is the first video that I have found that explains the RMF in a very clear and succinct way. Thank you so much! You are awesome!!!

[bsai]

Finally, I get it! You’re a very good teacher.

[mojisolaolokun]

You are the best in this so far .God bless you

[ageorge]

You are a very good teacher. And I appreciate your humility. Thank you for your hard work. LOVE IT!

[LV-ybsz]

Best video I found. Thank you for creating it.

[vinnyb]

This is exactly what I needed. Thank you for this video!

[shirleyakwafo]

I like your thorough explanation of these concepts!

[JeanBrett]

Good morning KamilSec, just to thank you for your videos, particularly this video, it helped me a lot, no body on youtube was able to explain the Risk analysis, Risk assessment and Risk management in details as you have shown here - thank you very much

[doyinsolaphilips]

I’m short of words, but God bless all you do prof!

[OpheliaAgyeman-vq]

Thanks so much Sir for breaking it down… An awesome presentation…

[Tiaphatyty]

Thank you for this video Sir!! Before now, these concepts were so blur

[stephenbrown]

You the real deal bro God bless you bunch

[oladimejimichaeloloyede]

I sent you an email, is there a way I can reach you on the aspect of mentorship?
Do you have or can you do training on PCI DSS?

[adjeleya]

This is very helpful. I had difficulty differentiating between the 3. Thanks for breaking it down. Do you offer private session or class to assist with interviewing prep for RMF. If so How much?

[wilson]

thank you once again for the videos. Question for you sir, do you have a video on POAM? can you post one for us? Thanks
Prof .you are awesome

[adjeleya]

Hi, can you give me the link to website for the RAR report. I must have missed it.