What is the overarching goal of IT Security Risk Management?

To catalog IT risks

To reduce the risk of today’s security threats, poor security practices, and operational security compliance failures

To give the SCA confidence in the organization's breach response procedures

To reduce bottlenecks in threat analysis