Control and Risk are the two parts of the coin. Risk management is the process of identifying vulnerabilities and threats to operating system resources to achieving business objectives and deciding ...