This item is unavailable in your countryOptimization applicationsEnterprise risk management involves a multitiered approach connecting strategic goals with the daily operations of information systems. Figure 3 depicts this structured risk management process (NIST 2011b). Figure 3. Multi-Tiered Risk Management Strategy. Tier 1 frames the organization risk and informs all other activities.