Risk and Compliance

Risk management is predicting and managing risks that could hinder the organisation from reliably achieving its objectives under uncertainty. Risk management is the process that allows IT managers to balance the operational and economic costs of protective measures and achieve gains in mission capability by protecting the IT systems and data that support their organisations’ missions.

Compliance refers to adhering with the mandated boundaries (laws and regulations) and voluntary boundaries (company's policies, procedures, etc.). This allows companies to prevent or at least reduce the chance of customer data from being stolen and protects the reputation and credibility of the organisation.