This course offers a comprehensive examination of the information security risk management domain, emphasizing the risk landscape and management activities. It begins with foundational discussions on risk concepts, vulnerabilities, and threat modeling, and progresses to applying this knowledge in risk governance, assessment, analysis, response, and monitoring. With two lessons and seven sub-lessons aligned with ISACA's risk management objectives, the course integrates interactive challenges and case studies to deepen understanding. Each lesson concludes with a quiz, reinforcing the principle that every information security decision is inherently a risk management decision, crucial for enhancing an organization's security program.