This foundational course describes how organizations can proactively identify, assess, mitigate, and respond to cybersecurity risks and incidents in alignment with international standards. It covers the entire risk management lifecycle, from threat modeling and vulnerability assessment to risk treatment and monitoring, while integrating industry-recognized frameworks such as ISO 27005, NIST SP 800-37, and FAIR. The course also emphasizes building and executing robust incident response strategies, including preparation, detection, containment, eradication, recovery, and post-incident analysis. Participants will explore real-world case studies of breaches and attacks to understand best practices, regulatory compliance requirements, and the importance of effective communication and coordination across technical and business teams.