Security risk management The Security Risk Management process has been established to integrate security requirements into the SDLC, enterprise architecture, and acquisition and procurement processes.