The world is an ever-changing and complex environment for security risk managers, who must consider a range of risks related to achieving the organization’s objectives. To survive, organizations must be adaptable and agile. Security needs to be thought of within the context of managing the risks of the organization to assure its resilience. An essential tool is to employ a systems approach to risk and resilience management based on the implementation of management system standards, tailored to its specific culture, nature, and environment.