information risk management(IRM) is the process of identifying,assessing,and reducing risk to an acceptable level and implementing the right mechanisms to maintain that level of risk.

• 信息风险管理是识别，绑定和减少风险至可接受的风险级别，实施正确的机制来维护那个风险级别。