Question: what is the difference between incident management and risk management?
Answer: the likelihood that an incident could cause damage or loss multiplied by the size of that potential damage or loss. Risk management, then, is the process of determining what level of risk is acceptable, and what actions should be taken to mitigate the risks that your organization considers unacceptable.