RISK IT Framework and Practitioner Guide

RiskIT框架填补了通用风险管理框架与详细IT风险管理框架之间的空白。它提供了全面的风险视图,涵盖IT使用相关的所有风险,并深入探讨风险管理工作,从顶层文化和基调到运营层面。该框架建立在ISACA现有框架之上,如COBIT和ValIT,帮助企业理解并管理重要的IT风险类型。

 http://www.isaca.org/riskit

 

The Risk IT Framework fills the gap between generic risk management frameworks and detailed (primarily security-related) IT risk management frameworks. It provides an end-to-end, comprehensive view of all risks related to the use of IT and a similarly thorough treatment of risk management, from the tone and culture at the top, to operational issues. In summary, the framework will enable enterprises to understand and manage all significant IT risk types, building upon the existing risk related components within the current ISACA frameworks, i.e., COBIT and Val IT.


 

The Risk IT Brochure & Framework are available free for everybody to download. The Risk IT Practitioner Guide with the toolkit can be freely downloaded by ISACA members. All these publications may be purchased in book format.

The Risk IT Brochure ■ What is Risk IT? ■ What does Risk IT do? ■ What are the benefits of using Risk IT?

The Risk IT Framework
- Principles
- Process Details
- Management Guidelines
- Maturity Models

The Risk IT Practitioner Guide
- Risk Universe, Appetite and Tolerance
- Risk Awareness, Communication and Reporting
- Expressing and Describing Risk, Risk Scenarios
- Risk Responses and Prioritisation
- Using COBIT® and Val ITTM

The Risk IT Practitioner Guide Toolkit
- High-level IT Risk Assessment Form
- Risk Communication Flows
- Template Risk Register Entry
- Generic IT Risk Scenarios
- Generic IT Risk Scenarios Mapped to COBIT and Val IT Processes
- Generic IT Risk Scenarios and Environmental Risk Factors
- COBIT Controls and Val IT Key Management Practices to Mitigate IT Risk

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值