Security risk management

The process of identifying, assessing and taking steps to reduce security risks to an acceptable level.