Tell me what you know about Security and Risk Management (Feynman Technique)

lmoworld

Let's collaborate. In your own words. My plan is to come here once a day and start a conversation about one of the domains. No researching. Just put what you know below.

Here is what I know about the topic.

1. Security should be built in and not baked on.
2. CIA is important (find a balance that suit the organization)
3. HAK (something you have, something you know, something you are)
4. NIST 800-30 Risk Management
5. ISO 27001 and ISO 27002

I know there is more to it, but this is all I could think of.