Cyber risk management is the process of identifying, analysing, and evaluating how to handle an organisations’ cyber security threats. This subject will introduce the fundamental tenets of risk management, and explore cybersecurity risk management frameworks. Cyber incident response is an organised approach to addressing and managing a major security breach, threat or attack. The goal is to handle the incident in a way that limits damage, reduces recovery time and losses, and take pro-active measures in the follow up and recovery phase to prevent future attacks. Students will explore common cyber attacks requiring incident response such as payment diversion fraud (business email compromise), ransomware, data breach, and advanced persistent threats. They will learn about each of these threats and how to manage such threats through the development of incident response plans including people, process, technology and information.