Title: IT risk : turning business threats into competitive advantage /
Authors: Westerman, George, 1963-; Hunter, Richard, 1952-
Publisher: Harvard Business School Press,
Year: 2007
Subjects: Information technology Management; Management information systems.; Risk management.; Information technology Security measures
Abstract: "In this book, the authors define four types of IT risk: availability, access, accuracy, and agility. Citing numerous company examples, they then introduce three disciplines that enterprises must master to manage IT risk effectively: a solid foundation of IT assets, people, and supporting processes and controls that enable executives to manage the right risks in the right order; a well-designed risk governance process - including oversight by high-level executives - that allows companies to identify, prioritize, and track risks; and a risk-aware culture, nurtured from the top, that attunes people to the causes and solutions for IT risks and creates increased vigilance across the organization."--Jacket.
Contents: Introduction: IT risk and consequences -- 1. The 4A risk management framework -- 2. The three core disciplines of IT risk management -- 3. Fixing the foundation : strengthening the base of the pyramid -- 4. Fixing the foundation : simplifying the installed base -- 5. Developing the risk governance process -- 6. building a risk-aware culture -- 7. Bringing the three disciplines up to speed -- 8. Looking ahead -- 9. Ten ways executives can improve IT risk management.