Governance & Compliance
What is Risk Assessment?
A risk assessment is the process of identifying threats and vulnerabilities, and evaluating the likelihood and potential impact of adverse events on an organization's assets and operations. It matters because it provides the basis for prioritizing security investments and making informed, risk-based decisions.
Example
An assessment determines that a legacy system holding customer data poses a high risk, leading leadership to fund its replacement.
Reference: NIST ↗
Related Clear Infosec services
Related terms
Have a question about risk assessment in your environment? Talk to our team.