Information Risk Management identifies and controls threats and vulnerabilities to information resources in an organization in order to achieve business objectives.