Risk Management for Protection Programs and Activities

The Risk Management for Protection Programs and Activities capability is described as the identification, assessment, and prioritization of risks to inform Protection activities, countermeasures, and investments. This goal is accomplished by implementing and maintaining risk assessment processes to identify and prioritize assets, systems, networks, and functions, as well as implementing and maintaining appropriate tools to identify and assess threats, vulnerabilities, and consequences.