Risk management is a broad field with unique context when it comes to cybersecurity. This episode introduces the basic concepts of risk management, risk strategy, and various risk management models and tools such as Factor Analysis in Information Risk (FAIR), the U.S. federal government's Risk Management Framework (RMF), and ISO 31000. Special guest, Philip Lefeber shares his expertise on the subject.