Risk Management can be divided into three general types: risk management and decision-making, the process and mechanics of IT risk management, and the practice of risk management. In this issue's "Reference Point," Bob Charette recommends some useful resources on risk management.