National Institute of Standards and Technology (NIST) provides a very comprehensive risk management guide for information technology systems. We are going to highlights some of the interesting parts. [21]