Enterprise Security Risk Management

Enterprise Security Risk Management
Author: Brian Allen, Esq., CISSP, CISM, CPP, CFE
Publisher: Rothstein Publishing
Total Pages: 407
Release: 2017-11-29
Genre: Business & Economics
ISBN: 1944480439

As a security professional, have you found that you and others in your company do not always define “security” the same way? Perhaps security interests and business interests have become misaligned. Brian Allen and Rachelle Loyear offer a new approach: Enterprise Security Risk Management (ESRM). By viewing security through a risk management lens, ESRM can help make you and your security program successful. In their long-awaited book, based on years of practical experience and research, Brian Allen and Rachelle Loyear show you step-by-step how Enterprise Security Risk Management (ESRM) applies fundamental risk principles to manage all security risks. Whether the risks are informational, cyber, physical security, asset management, or business continuity, all are included in the holistic, all-encompassing ESRM approach which will move you from task-based to risk-based security. How is ESRM familiar? As a security professional, you may already practice some of the components of ESRM. Many of the concepts – such as risk identification, risk transfer and acceptance, crisis management, and incident response – will be well known to you. How is ESRM new? While many of the principles are familiar, the authors have identified few organizations that apply them in the comprehensive, holistic way that ESRM represents – and even fewer that communicate these principles effectively to key decision-makers. How is ESRM practical? ESRM offers you a straightforward, realistic, actionable approach to deal effectively with all the distinct types of security risks facing you as a security practitioner. ESRM is performed in a life cycle of risk management including: Asset assessment and prioritization. Risk assessment and prioritization. Risk treatment (mitigation). Continuous improvement. Throughout Enterprise Security Risk Management: Concepts and Applications, the authors give you the tools and materials that will help you advance you in the security field, no matter if you are a student, a newcomer, or a seasoned professional. Included are realistic case studies, questions to help you assess your own security program, thought-provoking discussion questions, useful figures and tables, and references for your further reading. By redefining how everyone thinks about the role of security in the enterprise, your security organization can focus on working in partnership with business leaders and other key stakeholders to identify and mitigate security risks. As you begin to use ESRM, following the instructions in this book, you will experience greater personal and professional satisfaction as a security professional – and you’ll become a recognized and trusted partner in the business-critical effort of protecting your enterprise and all its assets.

The Philosophy of Risk

The Philosophy of Risk
Author: John C Chicken
Publisher: Thomas Telford
Total Pages: 210
Release: 1998
Genre: Business & Economics
ISBN: 9780727726667

An element of risk is inherent in most activities, but discussion about the acceptability of risk is often compartmentalised. This book aims to give decision-makers a logical overall philosophy of risk.

Enterprise Risk Management

Enterprise Risk Management
Author: John R. S. Fraser
Publisher: John Wiley & Sons
Total Pages: 600
Release: 2010-01-07
Genre: Business & Economics
ISBN: 0470499087

Essential insights on the various aspects of enterprise risk management If you want to understand enterprise risk management from some of the leading academics and practitioners of this exciting new methodology, Enterprise Risk Management is the book for you. Through in-depth insights into what practitioners of this evolving business practice are actually doing as well as anticipating what needs to be taught on the topic, John Fraser and Betty Simkins have sought out the leading experts in this field to clearly explain what enterprise risk management is and how you can teach, learn, and implement these leading practices within the context of your business activities. In this book, the authors take a broad view of ERM, or what is called a holistic approach to ERM. Enterprise Risk Management introduces you to the wide range of concepts and techniques for managing risk in a holistic way that correctly identifies risks and prioritizes the appropriate responses. This invaluable guide offers a broad overview of the different types of techniques: the role of the board, risk tolerances, risk profiles, risk workshops, and allocation of resources, while focusing on the principles that determine business success. This comprehensive resource also provides a thorough introduction to enterprise risk management as it relates to credit, market, and operational risk, as well as the evolving requirements of the rating agencies and their importance to the overall risk management in a corporate setting. Filled with helpful tables and charts, Enterprise Risk Management offers a wealth of knowledge on the drivers, the techniques, the benefits, as well as the pitfalls to avoid, in successfully implementing enterprise risk management. Discusses the history of risk management and more recently developed enterprise risk management practices and how you can prudently implement these techniques within the context of your underlying business activities Provides coverage of topics such as the role of the chief risk officer, the use of anonymous voting technology, and risk indicators and their role in risk management Explores the culture and practices of enterprise risk management without getting bogged down by the mathematics surrounding the more conventional approaches to financial risk management This informative guide will help you unlock the incredible potential of enterprise risk management, which has been described as a proxy for good management.

Management of Risk

Management of Risk
Author:
Publisher: The Stationery Office
Total Pages: 160
Release: 2002
Genre: Business & Economics
ISBN: 9780113309092

This guide is intended to help organisations put in place effective frameworks for taking informed decisions about risk. It brings together recommended approaches, checklists and pointers to more detailed information on tools and techniques. The topics covered include: the principles of risk management; how risks are managed; managing risks at the strategic, programme, project and operational level; techniques and examples of the benefits of risk management. The publication draws on the experience of experts from both the private and public sector.

Risk and Rationality

Risk and Rationality
Author: K. S. Shrader-Frechette
Publisher: Univ of California Press
Total Pages: 334
Release: 1991-01-01
Genre: Philosophy
ISBN: 9780520072893

Only ten to twelve percent of Americans would voluntarily live within a mile of a nuclear plant or hazardous waste facility. But industry spokespersons claim that such risk aversion represents ignorance and paranoia, and they lament that citizen protests have delayed valuable projects and increased their costs. Who is right? In Risk and Rationality, Kristin Shrader-Frechette argues that neither charges of irresponsible endangerment nor countercharges of scientific illiteracy frame the issues properly. She examines the debate over methodological norms for risk evaluation and finds analysts arrayed in a spectrum. Points of view extend from cultural relativists who believe that any risk can be justified (since no rational standards are ultimately possible) to naive positivists who believe that risk evaluation can be objective, neutral, and value free. Both camps, she argues, are wrong, because risk evaluation as a social process is rational and objective, even though all risk-evaluation rules are value-laden. Shrader-Frechette defends a middle position called "scientific proceduralism." She shows why extremist views are unreliable, reveals misconceptions underlying current risk-evaluation methods and strategies, and sketches the reforms needed to set hazard assessment and risk evaluation on a publicly defensible foundation. These reforms involve mathematical, economic, ethical, and legal procedures. They constitute a new paradigm for assessment when acceptance of public hazards is rational, recognizing that laypersons are often more rational in their evaluation of societal risks than either experts or governments have acknowledged. Such reforms would provide citizens with more influence in risk decisions and focus on mediating ethical conflicts, rather than seeking to impose the will of experts. Science, she argues, need not preclude democracy. Only ten to twelve percent of Americans would voluntarily live within a mile of a nuclear plant or hazardous waste facility. But industry spokespersons claim that such risk aversion represents ignorance and paranoia, and they lament that citizen protests have delayed valuable projects and increased their costs. Who is right? In Risk and Rationality, Kristin Shrader-Frechette argues that neither charges of irresponsible endangerment nor countercharges of scientific illiteracy frame the issues properly. She examines the debate over methodological norms for risk evaluation and finds analysts arrayed in a spectrum. Points of view extend from cultural relativists who believe that any risk can be justified (since no rational standards are ultimately possible) to naive positivists who believe that risk evaluation can be objective, neutral, and value free. Both camps, she argues, are wrong, because risk evaluation as a social process is rational and objective, even though all risk-evaluation rules are value-laden. Shrader-Frechette defends a middle position called "scientific proceduralism." She shows why extremist views are unreliable, reveals misconceptions underlying current risk-evaluation methods and strategies, and sketches the reforms needed to set hazard assessment and risk evaluation on a publicly defensible foundation. These reforms involve mathematical, economic, ethical, and legal procedures. They constitute a new paradigm for assessment when acceptance of public hazards is rational, recognizing that laypersons are often more rational in their evaluation of societal risks than either experts or governments have acknowledged. Such reforms would provide citizens with more influence in risk decisions and focus on mediating ethical conflicts, rather than seeking to impose the will of experts. Science, she argues, need not preclude democracy.

Corporate Risk Management

Corporate Risk Management
Author: Tony Merna
Publisher: John Wiley & Sons
Total Pages: 452
Release: 2011-03-10
Genre: Business & Economics
ISBN: 1119995108

The book analyzes, compares, and contrasts tools and techniques used in risk management at corporate, strategic business and project level and develops a risk management mechanism for the sequencing of risk assessment through corporate, strategic and project stages of an investment in order to meet the requirements of the 1999 Turnbull report. By classifying and categorizing risk within these levels it is possible to drill down and roll-up to any level of the organizational structure and to establish the risks that each project is most sensitive to, so that appropriate risk response strategies may be implemented to benefit all stakeholders. "The new edition of this book provides a clear insight into the intricacies of corporate risk management and the addition of the case study exemplars aids understanding of the management of multiple projects in the real world." —Professor Nigel Smith, Head of the School of Civil Engineering, University of Leeds

ERM - Enterprise Risk Management

ERM - Enterprise Risk Management
Author: Jean-Paul Louisot
Publisher: John Wiley & Sons
Total Pages: 293
Release: 2014-06-03
Genre: Business & Economics
ISBN: 1118539524

A wealth of international case studies illustrating current issues and emerging best practices in enterprise risk management Despite enterprise risk management's relative newness as a recognized business discipline, the marketplace is replete with guides and references for ERM practitioners. Yet, until now, few case studies illustrating ERM in action have appeared in the literature. One reason for this is that, until recently, there were many disparate, even conflicting definitions of what, exactly ERM is and, more importantly, how organizations can use it to utmost advantage. With efforts underway, internationally, to mandate ERM and to standardize ERM standards and practices, the need has never been greater for an authoritative resource offering risk management professionals authoritative coverage of the full array of contemporary ERM issues and challenges. Written by two recognized international thought leaders in the field, ERM-Enterprise Risk Management provides that and much more. Packed with international cases studies illustrating ERM best practices applicable across all industry sectors and business models Explores contemporary issues, including quantitative and qualitative measures, as well as potential pitfalls and challenges facing today's enterprise risk managers Includes interviews with leading risk management theorists and practitioners, as well as risk managers from a variety of industries An indispensable working resource for risk management practitioners everywhere and a valuable reference for researchers, providing the latest empirical evidence and an exhaustive bibliography

Future Risks and Risk Management

Future Risks and Risk Management
Author: B. Brehmer
Publisher: Springer Science & Business Media
Total Pages: 282
Release: 1994-09-30
Genre: Technology & Engineering
ISBN: 9780792330578

Future Risks and Risk Management provides a broad perspective on risk, including basic philosophical issues concerned with values, psychological issues, such as the perception of risk, the factors that generate risks in current and future technological and social systems, including both technical and organizational factors. No other volume adopts this broad perspective. Future Risks and Risk Management will be useful in a variety of contexts, both for teaching and as a source book for the risk professional needing to be informed of the broader issues in the field.