Managing risk: Who, what, how

09.08.2006

options, dependent on their probability and impact. High

probability/high impact risks are avoided altogether. Low

probability/low impact risks can be 'accepted' with no investment in

controls to reduce their likelihood or impact. High probability/low

impact risks are things like computer viruses, and it's desirable to