Enterprise Level IT Risks: An Assessment Framework and Tool

摘要：

Increase in emphasis on risk management allows for better enterprise IT risk management. Early risk identification and assessment ensures effective risk management steps are formulated. The formulation and sustenance of an IT risk management framework is one of the critical and challenging tasks of modern corporate enterprise risk management The existence of a risk assessment tool allows for effective risk measurement. This paper presents an enterprise level IT risk assessment framework and a tool that is based on the framework which organizes IT risks into five categories: infrastructure development and support, operations and maintenance of business process, office level support, software development and outsourcing management The approach helps assess and identify IT risks at the enterprise level.

关键词： enterprise level risk assessment framework information technology

作者: Nadhirah Azizi Khairuddin Hashim

作者单位: Software Engineering Department Tenaga Nasional University Malaysia

会议类型: 国际会议

会议名称: 2010 3rd IEEE International Conference on Computer Science and Information Technology(第三届IEEE计算机科学与信息技术国际会议 ICCSIT 2010)

会议地点: 成都

会议语种:英文

页码: 333-336

在线出版日期: 2010-07-07（万方平台首次上网日期，不代表论文的发表时间）