discussion question risk managment

The book discusses Risk Management. As mentioned in the Chapter, Risk Management is a process of identifying risk and taking the proper steps to reduce that risk to an acceptable level. One process commonly used is Risk Management Framework. This is a six step process adopted by the government to reduce risk in the environments of government programs. Do you think that Risk Management Framework is an effective tool? Do you think Risk Management Framework is too boiler plate and does not allow systems to properly protect their systems?