Reduce and Manage Risk
Reduce and manage risk is the process of lowering the risk in your environment and keeping it within your risk appetite. ETM supports this process from the first review of risk to the final confirmation that remediation is complete.
ETM calculates risk from the data that it collects and enriches. This section explains how to use that risk data to plan actions, track progress, and confirm results.
Risk Management Lifecycle
Risk management in ETM follows a continuous lifecycle:
- Understand the current risk in your environment.
- Identify the actions that reduce the most risk.
- Create plans to carry out those actions.
- Track the progress of each plan.
- Validate that remediation is complete and measure the result.
After you complete the lifecycle, you start it again. New assets, vulnerabilities, and threats continually change the level of risk.