topics that matter; ideas worth sharing

share a tip, submit a link, add something new

IT Risk: Turning Business Threats into Competitive Advantage

September 4, 2007, 09:13 PM —  ITworld.com — 

IT risk incidents damage corporate reputations, expose weaknesses in firms management teams, rob profits, and dampen competitive advantage. What's an IT executive to do? Authors George Westerman and Richard Hunter offer 3 tips for improving IT risk management in your enterprise.

Analyze IT risks in terms of business risks and focus your resources accordingly.
Novartis CIO Jim Barrington solves IT issues "in direct relation to the size of the risk." For example, says Barrington, if a payroll system breaks, there is no business risk and it doesn't make sense to spend a great deal of money or time trying to back that up. Conversly, "clinical trial data coming from research studies involving hundreds of patients is vital" and not easily reproduced and loss of that data poses a huge risk to the business, says Barrington.

Make risk part of every conversation about overseeing IT.
In an effort to make business executives aware of how certain IT risks may effect the business's goals, Biogen Idec CIO Patrick Purcell says he takes some time in his regular meetings with senior business executives to raise awareness about IT risk. To help drive the point home, he tailors his message. "So if I'm talking about risk in the finance area," says Purcell," I would talk in terms of Sarbanes-Oxley and the control risk that we might have in that regard."

Think of employees as both a problem and a solution.
According a U.S. Secret Service and CERT report, about 33% of those who committed insider cyber-sabotage made their plans known to colleagues, and "about 12 percent of those saboteurs who were caught, before or after committing the act, were turned in by coworkers."

Buy the book

ITworld.com

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources