Information security risk management imperatives and opportunities
Information security risk management defined
Information security risk management standards
A survey of available information security risk management methods and tools
Methodologies examples : COBIT and OCTAVE
Risk management issues and organization specifics
Assessing organization and establishing risk management scope
Identifying resources and implementing the risk management team
Identifying assets and organization risk exposures
Remediation planning and compliance reporting.
Information technology risk management in enterprise environments : a review of industry practices and a practical guide to risk management teams by Jake Kouns. ISBN 9780471762546. Published by Wiley in 2010. Publication and catalogue information, links to buy online and reader comments.