Need Comments On this two attached files

CYBER SECURITY alludes to an arrangement of strategies used to secure the respectability of networks, projects, and information from attack, harm or unapproved access. The center usefulness of cyber security includes shielding data and frameworks from major cyber threats. These cyber threats take numerous structures (e.g., application attacks, malware, ransomware, phishing, misuse packs). Tragically, digital adversaries have figured out how to dispatch mechanized and complex attacks utilizing these strategies – at lower and lower costs. Subsequently, keeping pace with cyber security system and tasks can be a test, especially in government and endeavor networks where, in their most troublesome frame, cyber threats frequently train in on mystery, political, military or infrastructural resources of a country, or its kin. RISK MANAGEMENT: Managing "model risk," which is the risk of money related misfortune, wrong monetary articulations, ill-advised administrative choices, or harmed hierarchical notoriety, coming about because of inadequately manufactured, utilized, or controlled models can be expensive and testing. For instance, if the info information or suspicions utilized as a part of a remittance model for assessing holds are fragmented or off base, the subsequent model yield could cause an accounting mistake. To start with the line of protection: Model engineers, who frequently are likewise the line-of-plan of action clients, speak to the primary line of guard and are in charge of creating models in view of formal inner measures and necessities; testing the models, their information sources, and usage; reporting the hypothetical underpinnings of the models and the justification for decisions with respect to data sources and suspicions; and checking the models' execution once they are being used. The second line of protection: Before utilize, and on a rotational premise from that point, models are for the most part subject to approval by an autonomous gathering, called a "validator," with adequate freedom from the developer. Validators acknowledge or dismiss models and can distinguish issues that affect the monetary statements. It is typically brought together inside an association, it likewise, for the most part, makes and circulates detailing and investigation bundles to the governing body and senior administration, who examine the measure of model risk the association has, separately and in the total. CYBER SECURITY AND RISK MANAGEMENT: Different associations have diverse innovation foundations and distinctive potential dangers. A few associations, for example, money related administrations firms (finance firms) and human services associations, have administrative worries notwithstanding business worries that should be tended to in a cyber security hazard administration framework. Cyber security ought to take a layered approach, with extra assurances for essential resources, for example, corporate and client information. Keep in mind that reputational hurt from a rupture can accomplish more harm than the break itself. Once information is mapped, associations settle on better choices on how that information is represented and diminish their hazard impression. For instance, even with preparing and a solid security culture, touchy data can leave an association essentially unintentionally, for example, information put away in concealed lines in spreadsheets or incorporated into notes inside worker introductions or long email strings. Filtering the venture for touchy information very still and afterward expelling any information put away where it doesn't have a place extraordinarily decreases the danger of an unplanned loss of delicate data risk administration process takes the Capability Maturity Model approach, with the accompanying five levels: 1. Beginning (disordered, specially appointed, singular heroics) - the beginning stage for utilization of another or undocumented rehash process 2. Repeatable - the procedure is, in any event, reported adequately with the end goal that rehashing similar advances might have endeavored 3. Characterized - the procedure is characterized and affirmed as a standard business process 4. Managed - the procedure is quantitatively overseen as per settled upon measurements 5. Advancing - process administration incorporates consider process advancement/change. REFERENCES: 1) Zekos & Georgios (2014). Risk Management in 21st century. Retrieved from http://library.acaweb.org/search~S16?/XRisk+management+&searchscope=16&SORT=DZ/XRisk+management+&searchscope=16&SORT=DZ&extended=0&SUBKEY=Risk+management+/1%2C2017%2C2017%2CB/frameset&FF=XRisk+management+&searchscope=16&SORT=DZ&7%2C7%2C 2) McAdams & Arthur C. (2004). Cyber Security and Risk Management Journal Vol.38,Issue 4. Retrieved from https://search.proquest.com/openview/66b9f5b793d9bba04d9a72b1e655d5bd/1?pq-origsite=gscholar&cbl=47365 3) Charles McLellan (2013).IT security and Risk Management : An Overview, December 2nd. Retrieved from https://www.acs.org.au/content/dam/acs/acs-publications/ACS_Cybersecurity_Guide.pdf 4) Malhotra, Y. (2015). Cybersecurity and Cyber-Finance Risk Management: Strategies, Tactics, Operations, and, Intelligence: Enterprise Risk Management to Model Risk Management: Understanding Vulnerabilities, Threats, and Risk Mitigation (Presentation Slides).