Threat Management
Threat management is the systematic process of identifying, assessing and reducing the cybersecurity threats facing an organisation's assets.
What is Threat Management?
Definition
Threat Management is the systematic work of establishing which threats actually face an organisation, assessing what they would cost, and reducing them to a level the business has agreed to accept. It joins together activities usually run separately — threat intelligence, vulnerability management, monitoring and incident response — around a single question: which threats matter here, and what is being done about each one. In cybersecurity terms it is the discipline that stops security work from becoming a list of tools with no stated purpose.
Role in cybersecurity
Threat Management plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.