A Framework For Managing IT Investment Risk

There is no shortage of articles, reports, and blogs on the topic of IT risk; however, they almost always focus on security-related risks, including computer viruses and worms, denial of service attacks, and theft of data, or infrastructure-related risks, including network or server outages. Little attention has been paid to IT investment risk, yet given the importance that IT plays today and is expected to play in the future, it is arguably at least as important. IT investment risk managed correctly is an enabler facilitating the use of technology to help the business exploit new opportunities to create value for the enterprise. Managed incorrectly, it's an inhibitor leading to value destruction. Organizations must incorporate IT investment risk within their overall business risk framework.