Incident Response in a Microsoft SQL Server Environment

Risk Management is often an overlooked aspect of any Cybersecurity program, however, without it, the potential of a major incident increases. The challenges associated with risk management are figuring out how to identify, prioritize, track, and mitigate risk. This paper will explore a framework of managing risk by utilizing an open source program called SimpleRisk. A case study involving GIAC Enterprises, will explain the features and advantages of using such a tool to manage risk.