Examining the concept of IT security risk (including the relationship to assets, threats and vulnerabilities), and the broad options for dealing with it. [Released under Creative Commons Attribution-NonCommercial-ShareAlike 2.0 UK: England & Wales licence.]