Security Risk Management is the process of identifying, assessing, prioritizing, and mitigating cybersecurity threats and vulnerabilities that could impact an institution's operations, data, reputation, and mission. Risk is determined by evaluating the likelihood that known threats will exploit vulnerabilities and the potential impact on valuable assets.

Effective risk management involves implementing appropriate controls and safeguards, making informed decisions about risk acceptance, and communicating risk posture to leadership and stakeholders.  

Looking for Security related events, check out our Events Calendar.

Recent Spotlight

  • Hotline: Cybersecurity and Privacy | August 2026

    Hotline: Cybersecurity and Privacy | August 2026

    "Hotline: Cybersecurity and Privacy" tackles the philosophical, moral, strategic, and organizational quandaries related to higher education cybersecurity, privacy, and data. This month, Mike answers your questions about integrating security into business relationship management, preventing risk acceptance from becoming risk avoidance, and finding purpose in documentation.

Browse Security Risk Management