Identify the main areas that Care Ltd should consider when identifying and managing cyber risk, and explain why supplier risk belongs in this work.

### What a good answer covers - Name asset management and business environment. - Include governance, risk assessment, and risk-management strategy. - Include supply-chain risk management. - Explain that suppliers can affect the organisation through access, dependencies, or shared information. ### The concept Risk management begins with knowing what the organisation has, what it does, and what it depends on. Governance assigns oversight and responsibility, while risk assessment helps identify and evaluate possible harm. Suppliers matter because an organisation’s security does not stop at its own boundary. Care Ltd collaborates with other services and depends on vendors, so external weaknesses can create consequences for confidentiality and care operations. ### Terms - **Supply chain**: the network of suppliers and external services that contribute to an organisation’s operations. - **Risk assessment**: identifying and evaluating possible risks and their effects. ### Remember An organisation must assess both its own assets and the external services it relies on.