An advanced risk framework

- [Narrator] NIST, in December 2018, issued revision two … to their original special publication on risk, … SP 800-37 Risk Management Framework. … The risk management framework provides a disciplined, … structured and flexible process for managing security … and privacy risk. … It covers information security categorization, … control selection, implementation, and assessment, … system and common control authorizations, … and continuous monitoring of risks. … The risk management framework considers risk … at three levels, … information systems risk, mission or business process risk, … and whole of business risk. … The risk management process involves preparation … of the necessary risk material … needed to carry out a risk management. … And then, a six stage process of categorization, … selection, implementation, assessment, … authorization and monitoring. … The prepare stage of the framework involves seven actions, … three of which are risk related and four controls related. … They are assign people to risk management roles, …