Week 5 Discussion 1

"NIST and Risk Governance and Risk Management" Please respond to the following:

Companies generally reference NIST standards when assessing their risk management.  Based on your learning this week, what do you think would be your top NIST consideration when starting to craft a risk management policy for a small to medium sized company?  Is it possible in your estimation to anticipate all possible threats and contingencies in advance of an attack?