The Risk IT Framework describes a detailed process model for the management of IT-related risk. In this model, multiple references are made to risk analysis, risk profile, responsibilities, key risk indicators (KRIs) and many other risk-related terms.
The Risk IT Practitioner Guide contains practical and more detailed guidance on how to accomplish some of the activities described in the process model.
In enterprises wishing to enhance maturity of risk management practices, The Risk IT Practitioner Guide can provide a solution accelerator, not in a prescriptive manner but as a solid platform upon which an improved practice can be built. The Risk IT Practitioner Guide can be used to assist with setting up an IT risk management framework in the enterprise, as well as to enhance existing IT risk management practices.
This guide does not claim completeness or comprehensiveness, meaning that besides the techniques and practices described here, other viable solutions and techniques exist and may be applied for managing IT risk.
Download the ebook