Risk management determines which cybersecurity measures are needed.

In simple terms:

  • Risk assessment identifies the problem
  • Security measures provide the solution