Risk Management
Security and resilience are defined as “strengthened through risk management. Risk refers to the ‘potential for an unwanted outcome resulting from an incident, event, or occurrence, as determined by its likelihood [a function of threats and vulnerabilities] and the associated consequences’; risk management is the ‘process of identifying, analyzing, and communicating risk and accepting, avoiding, transferring, or controlling it to an acceptable level at an acceptable cost.’”