Covers operational and technology risk management: how risk is defined and assessed, risk registers, appetite and tolerance, inherent and residual risk, and the avoid, mitigate, transfer and accept options for treating risk. Also covers key risk indicators, third-party risk and the ISO 31000, NIST RMF and FAIR frameworks, including quantitative loss analysis.