SEC315 wk3 d2

 "Risk Management"  Please respond to the following:

• Explain  the relationship between security and risk management. Take a position  on which is more important to a small organization, large organization,  and nonprofit organization. 
• Suppose top management is against  the idea of the implementation of an enterprise security risk management  plan simply because it is a waste of time and money. Describe the  actions you would take in an attempt to sway management’s opinion.  Include the reasons why management should change its mind and provide  real-life examples if necessary.