what are the key elements of risk management?
['Identify the assets to be protected. ... ', 'Identify the threats to those assets. ... ', 'Apply controls in a layered, overlapping way until the risks are reduced to an acceptable level.', 'Test the adequacy and effectiveness of the controls.', 'Monitor the program and periodically repeat the process.']