Given the increasing awareness of risk management, many good publications are out there. However, what stands this out, is its direct and wide industrial applications for the small, medium and large enterprise. It is written for easy comprehension with clear demonstrations for both technical and non-technical persons. This, however, does not compromise its high technical knowledge for experts. How to identify and utilize positive risks were simplified, which assure the availability of the ICT systems for their steady returns on investment and further assures the security of the entire business against trending global cyber attacks.