--- title: Bridging the Gaps of Risk Management From Theory to Practice | Vandis description: Vandis aggregates the latest in security, infrastructure, and virtualization news, industry trends, whitepapers and products so you can stay informed. image: https://vandis.com/hubfs/Imported_Blog_Media/risk-1945683_1920-3.jpg --- - [ Insights ](https://vandis.com/insights) - [ Our Portfolio ](https://vandis.com/case-studies) - [ Contract Vehicles ](https://vandis.com/contract-vehicles) [![Vandis](https://vandis.com/hs-fs/hubfs/raw_assets/public/vandis-u4m/templates/images/Logo.png?width=378&height=84&name=Logo.png "Vandis")](https://www.vandis.com) - Services ** ** - Solutions ** ** - [ Partners ](https://vandis.com/vandis-partners) - Resources ** ** - Who We Are ** ** [ Contact Us ](https://vandis.com/contact-vandis) ** April 2, 2019 # Bridging the Gaps of Risk Management From Theory to Practice Written by: [Vandis](https://vandis.com/insights/author/vandis) [mailto:?subject=Check%20out%20https://vandis.com/insights/bridging-the-gaps-of-risk-management-from-theory-to-practice](mailto:?subject=Check%20out%20https://vandis.com/insights/bridging-the-gaps-of-risk-management-from-theory-to-practice) ![Risk management](https://vandis.com/hubfs/Imported_Blog_Media/risk-1945683_1920-3.jpg) Risk management is one of the most commonly used terms in Information Security. Many security professionals describe the most critical aspect of their job as 'risk management' or 'risk assessment;' however, it is a broad term. Many frameworks and codes of practice define it as, 'the control of adverse events to an acceptable level of loss exposure.' Risk management is an organization’s best effort to prevent unauthorized parties from accessing valuable assets and resources; it is a crucial process within project management to identify such potential risks. While the definition and scope of are wide-ranging, effective risk management is a product of taking a particular set of measures. Without tailoring risk management efforts to meet our precise needs, we are left with generic 'best practices' that may or may not be effective in a given scenario. These nonspecific practices are what lead to the gaps between risk management theory and risk management practice. Below, we have briefly described [three common risk management gaps](https://www.f5.com/labs/articles/cisotociso/4-areas-where-infosec-facts-and-fiction-clash--mind-the-gap-pt--?mkt_tok=eyJpIjoiTXpGaE1EYzVOREJoTjJFeiIsInQiOiJ4MEdOSTl1QlNqYUEwVkNLb1E0R3J3aTRjUklSWFhMdjk3Um1DdXpDVUpQNGY5NWpSRWdKb0dlc3JxeWtvd1hMKzd3TUhCZFVCZEtRVE1ZckJkczgxWTdUVWNLaHlObTJTNUtqbWFhWDJPaTRjRFVQcDdNdjYxcjhibHh2ZHN3cStiXC95OWVPSDRPZURTcWtheGczVkR3PT0ifQ%3D%3D) that are found within risk management standards. ### Gap: Incomplete Risk Management An alarmingly low number of security professionals consider asset management, or asset inventory, to be an essential security process. Many even rank it as the least essential control within their risk management plan. Not surprisingly, a majority of security professionals report having low confidence in their inventory. We cannot protect our assets if we do not know what they are. An organization’s risk management processes will undoubtedly be lacking if they are without this vital information. ![Risk management gaps](https://vandis.com/hubfs/Imported_Blog_Media/railway-1758208_1920-2.jpg) ### Gap: Biased Risk Appraisal Prevalent articles with over-zealous headlines often magnify the amount of risk posed by 'Advanced Persistent Threat' (APTs). APTs were ranked as the top threat by security professionals - one of the most vital risks identified. Most industries, however, are not even targeted by APTs. The most significant risks to almost all organizations are considered commonplace in the Information Security industry: web application attacks and credential theft. Though these risks are not nearly as sophisticated as APTs, they must be adequately guarded against to prevent them from occurring; they are a vital piece of a risk avoidance management strategy. ### Gap: Misaligned Risk Mitigation Due to factors such as the biased risk appraisal noted above, some cybersecurity professionals’ processes do not align with what is occurring. An overwhelming majority of security professionals consider traditional firewalls and anti-virus software to be the most critical technical controls to handle enterprise risk management. While undoubtedly necessary, these controls do not adequately protect against web application attacks. Additionally, DDoS was ranked as the second most significant security threat (behind APTs), but very few organizations utilize anti-DDoS defenses. It is crucial to not only [correctly identify the risks](https://vandis.com/services/#project-services), but to take the right steps then to prevent them. For more information, and to help safeguard your company's data, [contact Vandis to discuss a custom-built solution](https://vandis.com/contact-us/). Tag(s): [Security & Cybersecurity](https://vandis.com/insights/tag/security-cybersecurity) ## [Vandis](https://vandis.com/insights/author/vandis) ### Blog Post Cards View All Posts June 15, 2026 ##### [ Securing AI in Practice: How Vandis and F5 Approach the Controls ](https://vandis.com/insights/securing-ai-in-practice-how-vandis-and-f5-approach-the-controls) [Artifical intelligence](https://vandis.com/insights/tag/artifical-intelligence) June 1, 2026 ##### [ Why AI Has Outpaced Enterprise Security and What Changes Now ](https://vandis.com/insights/why-ai-has-outpaced-enterprise-security-and-what-changes-now) [Artifical intelligence](https://vandis.com/insights/tag/artifical-intelligence) February 12, 2026 ##### [ Vandis Named to CRN's MSP 500 List for 2026 ](https://vandis.com/insights/vandis-named-to-crns-msp-500-list-for-2026) [Managed services](https://vandis.com/insights/tag/managed-services) ### Keep In Touch With Vandis Stay up-to-date on the latest in cyber security, networking and connectivity, and cloud solutions [![Vandis](https://vandis.com/hs-fs/hubfs/raw_assets/public/vandis-u4m/templates/images/Logo.png?width=209&height=467&name=Logo.png "Vandis")](https://vandis.com/) Tailored security and networking guidance: Building a secure and optimized network for your hybrid environment. **Corporate Office** 1 Albertson Avenue Albertson, NY 11507 **Phone: [(516) 281-2200](tel:5162812200)** **Toll Free: (800) 397-3146** **Fax: (516) 626-9003** - Services - [Professional Services](https://vandis.com/professional-services) - [Managed Services](https://vandis.com/managed-services) - [Project Management Services](https://vandis.com/project-management-services) - Solutions - [Cyber Security](https://vandis.com/cyber-security) - [Networking & Connectivity](https://vandis.com/networking-and-connectivity) - [Cloud Solutions](https://vandis.com/cloud-solutions) - Partners - [Our Partners](https://vandis.com/vandis-partners) - Resources - [Resources Library](https://vandis.com/resources) - [Events](https://vandis.com/events) - [Blog](https://vandis.com/insights) - [Our Portfolio](https://vandis.com/case-studies) - [Contract Vehicles](https://vandis.com/contract-vehicles) - Who We Are - [Who We Are](https://vandis.com/about-vandis) - [Careers](https://vandis.com/vandis-careers) © 2026 Vandis Inc., All Rights Reserved. [Terms of Use](https://vandis.com/terms-of-use)[Privacy Policy](https://vandis.com/privacy)[Event Policy](https://vandis.com/event-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Vandis", "url" : "https://vandis.com/insights/author/vandis" }, "dateModified" : "2025-07-02T21:53:57.562Z", "datePublished" : "2019-04-02T04:00:00.000Z", "headline" : "Bridging the Gaps of Risk Management From Theory to Practice | Vandis", "image" : [ "https://vandis.com/hubfs/Imported_Blog_Media/risk-1945683_1920-3.jpg" ], "mainEntityOfPage" : { "@id" : "https://vandis.com/insights/bridging-the-gaps-of-risk-management-from-theory-to-practice", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://vandis.com/hubfs/Vandis-Full%20Logo%20Full%20Color-1.png" }, "name" : "Vandis Inc." } } ```