Comments on: Risk Management In IT: How Do You Do It Correctly?

By: Dr. Jim Anderson

Dr. Jim Anderson — Fri, 10 Jul 2009 01:39:05 +0000

Zarir: The only IT risk assessments that I’m aware of all have to do with security ( see https://buildsecurityin.us-cert.gov/daisy/bsi/articles/best-practices/risk/250-BSI.html). A larger scope IT framework is called for…

By: CIOs Know That Good Security Is All About Policies | The Accidental Successful CIO

Wed, 08 Jul 2009 11:02:07 +0000

[...] systems and data is a daunting task. The first step to successful doing this is to develop a risk management program that captures and describes all of the various internal and external risks that your firm is [...]

By: Zarir Daruwalla

Zarir Daruwalla — Tue, 07 Jul 2009 06:03:46 +0000

Interesting points.
Often the IT risk assessment is only for the project and not for the complete IT department/services.
I was wondering if any standard framework for IT risk assessment exists.

Willing to contribute to create or modify such a ‘generic framework’.