Welcome guest
A business approach to effective information technology risk analysis and management
Sharon Halliday, Karin Badenhorst, Rossouw von Solms
Information Management & Computer Security
1996
19 - 31
0968-5227
10.1108/09685229610114178
MCB UP Ltd
Suggests that a number of difficulties are experienced by organizations using conventional risk analysis and management. “Conventional” refers to those methodologies which are based on the traditional asset/threat/vulnerability model. Identifies a need for an approach that is more suitable for smaller organizations, as well as organizations requiring a quicker, more simplified and less resource-intensive approach. In light of this requirement, proposes an alternative approach to effective information technology (IT) risk analysis and management. This approach has a business-oriented focus from an IT perspective.
Business analysis, Corporate planning, Information technology, Risk management
Conceptual Paper