The goal of Security Risk Management is to teach the reader practical techniques that will be used on a daily basis, while also explaining the fundamentals so s/he understands the rationale behind these practices. Security professionals often fall into the trap of telling the business how they need to do something, but they can't explain why. This book will help the reader to justify the so-called "best practices" that security professionals typically impose on businesses. Includes case studies to provide hands-on experience using risk assessment tools to calculate the costs and benefits of any security investment Explores each phase of the risk management lifecycle, focusing on policies and assessment processes that should be used to properly assess and mitigate risk Covers risk analysis, build, and implementation of security management programs