Cybersecurity is a process that requires an assessment of threats and the risk that they might occur, so risk management is central to cybersecurity and the likelihood of a cyber attack is an essential calculation that any business should make, so cybersecurity is also central to risk management. This close relationship between cybersecurity and risk management is recognized by the NIST Framework for Improving Critical Infrastructure Cybersecurity and the FISMA Risk Management Framework.