A framework for integrated risk management in information technology

Abstract

The use of information technology (IT) in organizations is subject to various kinds of potential risks. Explores the environment of IT in organizations, identifies the probable threats, and proposes a framework for integrated risk management. The risk management process has four major components ‐‐ risk identification, risk analysis, risk‐reducing measures, and risk monitoring. The framework can be used to guide organizations in reducing the losses resulting from the realization of threats to IT use.