Risk management
Risk management is the systematic process of identifying, assessing, and addressing uncertainties that could cause harm or affect objectives, assets, operations, or outcomes.
Think Like a Software Engineering Manager
Risk management is the systematic identification, assessment, ownership, mitigation, and monitoring of uncertainties that may affect project outcomes.
- How it is used
- Supports proactive project planning and execution while informing risk-based decisions across a project portfolio.
- How deep it goes
- Details five team steps and the lightweight ROAM status model, without specifying a numerical scoring method.
- Examples
- Uses competing new-product and legacy-system projects to illustrate resource and timeline trade-offs.
- What you can do after
- Practice/perform team risk identification, prioritization, ownership, mitigation planning, and regular monitoring.
Read how Think Like a Software Engineering Manager explains risk management →
Data-Driven Cybersecurity
The process of identifying, assessing, prioritizing, and addressing risks to organizational information systems, assets, data, and capabilities.
- How it is used
- Uses risk decisions and measurable exposure to prioritize mitigation and allocate limited cybersecurity resources.
- How deep it goes
- Works through assessment, control selection, authorization, monitoring, and register metrics; stops short of detailed control implementation.
- Examples
- Compares before-and-after vulnerability and incident-timing dashboards against targets, while noting high vulnerabilities that still need action.
- What you can do after
- Apply it via NIST RMF to structure risk decisions and use register metrics to review mitigation progress.
Read how Data-Driven Cybersecurity explains risk management →
Investing for Programmers
Risk management is the process of identifying, assessing, and reducing potential financial losses.
- How it is used
- Frames investing as defensive decision-making that protects portfolios before pursuing growth.
- How deep it goes
- Develops practical checks, risk matrices, allocation rules, hedging, staged investing, and behavioral controls without quantitative risk models.
- Examples
- Uses AI startups, LiDAR stocks, Coca-Cola, Apple, Pfizer, emerging technologies, earnings calls, and an 80-to-20 portfolio.
- What you can do after
- Apply risk matrices, portfolio allocation, hedging, staged investing, review routines, and behavioral safeguards to investment decisions.
Read how Investing for Programmers explains risk management →
Starting Data Analytics with Generative AI and Python
Risk management is the process of identifying, assessing, and addressing potential threats to objectives or operations.
- How it is used
- Applies risk management to responsible generative-AI use in data analytics and organizational decision-making.
- How deep it goes
- Explains identification, analysis, evaluation, and mitigation, while stressing that safeguards have limited and uneven success.
- Examples
- Uses AI safety reviews, harmful-content safeguards, and monitoring company mentions alongside negative terms as concrete examples.
- What you can do after
- Evaluate generative-AI risks, recognize mitigation tradeoffs, and respond proactively to emerging business issues.
Read how Starting Data Analytics with Generative AI and Python explains risk management →
Functional Design and Architecture: Examples in Haskell
The systematic identification, evaluation, and mitigation of potential problems affecting a project or system.
- How it is used
- Frames software design as decision-making under risks affecting cost, quality, requirements, and maintainability.
- How deep it goes
- Enumerates common software risks and their consequences but stops short of prescribing a mitigation procedure.
- Examples
- Uses client growth, misunderstood features, changing product needs, limited time, and overcomplicated code as risk scenarios.
- What you can do after
- Evaluate design compromises by comparing goals, requirements, simplicity, cost, and the consequences of identified risks.
Read how Functional Design and Architecture: Examples in Haskell explains risk management →
Related concepts
- risk acceptanceincludes · Risk acceptance is a risk treatment strategy in which an organization consciously retains a risk and its potential consequences without additional controls or intervention.
- hedgingincludes · Hedging is a risk-management practice that reduces exposure to adverse outcomes by taking compensating action.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.