Discussion:
"Risk Management"
Explain the relationship between security and risk management. Take a position on which is more important to a small organization, large organization, and nonprofit organization.
Suppose top management is against the idea of the implementation of an enterprise security risk management plan simply because it is a waste of time and money. Describe the actions you would take in an attempt to sway management's opinion. Include the reasons why management should change its mind and provide real-life examples if necessary.