Cybersecurity glossary
What is risk assessment?
Definition
A cybersecurity risk assessment identifies assets, threats and weaknesses, estimates likelihood and impact, and prioritizes how to treat each risk.
Why it matters
NIST SP 800-30 provides a formal method. Treatment options are reduce, accept, transfer (for example insurance) or avoid. Results feed a risk register.
Common questions about risk assessment
See also
Sources
Related Guides
GuideGRC
10 Steps to Implement ISO 27001 and Get Certified
A step-by-step ISO/IEC 27001:2022 implementation plan: scope, leadership, risk assessment, Statement of Applicability, Annex A controls, internal audit, management review and the certification audit.
Read more GuideSOC
9 Quick-Win AI Agent Use Cases for Security Operations
Nine high-impact, low-effort SOC tasks to hand to AI agents first, what each agent does and the metric that proves it, plus the tasks to keep human.
Read more