security architecture and design

Security includes confidentiality, integrity, and availability. A secure processing environment includes making sure that only those who are authorized have access to sensitive information, that the information is processed correctly, and that it is available when necessary.  To apply appropriate controls to an operating environment, it is necessary to understand who or what poses a threat to the processing environment and then to understand what could happen (risk or danger) from that threat. When the risk is understood, management must decide what it wants to do about that risk.

In your own words explain the various methods of approach an organization can take to manage risk. Please state your answer in a  2 page paper in APA format.  Include citations and sources in APA style.