Risk management doesn’t just happen; aware leaders need to make it happen.

• Appropriate risk management, rather than being a cost center, can be a business enabler; however, making that transition means looking at risk management not as an IT issue, but as a business issue.
• DR plans ensure the continuity of the IT operations that support business processes, but business continuity plans are required to ensure those higher level processes continue.
• Security protects not just an enterprise’s IT infrastructure, but also its decision-making capabilities (by ensuring confidentiality, integrity, and availability of its data), as well as its corporate reputation.