A causal framework was used to understand the key risks in IS organizations in several different industries. Our exploratory study indicated that organizational factors are key contributors to all risks. Change management tools are among the most common risk management tools. Tools to manage financial risk are needed by IS managers. Inter-organizational risk is a concern for managers involved in collaborative efforts.
Environmental factors contribute to risk most prominently in industries experiencing rapid change.
Future research will involve indepth case studies in a much broader sample of organizations. We will focus on the risk management tools in use by a number of different IS managers in a larger number of firms in different industries. The study will focus primarily on tools for managing organizational and financial risk. We will attempt to relate specific risk management tools to the risks that they address. In addition, we will focus on the outcomes, relating risk and risk management tools to various performance measures.