DRAGON can conduct for you a full risk management program. It is the formal process utilized to quantify, qualify, and mitigate specific concerns an organization may discover or define. Many companies have some form of risk management program. These programs may be very mature and well defined or may appear to have developed without planning or foresight. It is important for the security professional to identify the program in place and understand the approach accepted in a particular company. The specific model utilized by the company will give the security professional an understanding of the role he or she has in the program. This is critical whether the security professional is an employee or a consultant for a company. These programs tend to address well-defined and known risks with singularly focused mitigation strategies.