Question: what are the key elements of risk management?
Answer: Identify the assets to be protected. ... 
Identify the threats to those assets. ... 
Apply controls in a layered, overlapping way until the risks are reduced to an acceptable level.
Test the adequacy and effectiveness of the controls.
Monitor the program and periodically repeat the process.