Build an IT Risk Management Program
Mitigate the IT risks that could negatively impact your organization.
Unlock This BlueprintBlueprint Contents:
1. Build an IT Risk Management Program – A holistic approach to managing IT risks within your organization and involving key business stakeholders.
Gain business buy-in to understanding the key IT risks that could negatively impact the organization and create an IT risk management program to properly identify, assess, respond, monitor, and report on those risks.
-
Build an IT Risk Management Program – Phases 1-3 -
Integrated Risk Maturity Assessment
2. Risk Management Program Manual – A single source of truth for the risk management program to exist and be updated to reflect changes.
Leverage this Risk Management Program Manual to ensure that the decisions around how IT risks will be governed and managed can be documented in a single source accessible by those involved.
-
Risk Management Program Manual
3. Risk Register & Risk Costing Tool – A set of tools to document identified risk events. Assess each risk event and consider the appropriate response based on your organization’s threshold for risk.
Engage these tools in your organization if you do not currently have a GRC tool to document risk events as they relate to the IT function. Consider the best risk response to high severity risk events to ensure all possible situations are considered.
-
Risk Register Tool
-
Risk Costing Tool
4. Risk Event Action Plan and Risk Report – A template to document the chosen risk responses and ensure accountable owners agree on selected response method.
Establish clear guidelines and responses to risk events that will leave your organization vulnerable to unwanted threats. Ensure risk owners have agreed to the risk responses and are willing to take accountability for that response.
-
Risk Event Action Plan
-
Risk Report
Your Challenge
- Risk is unavoidable. Without a formal program to manage IT risk, you may be unaware of your severest IT risks.
- The business could be making decisions that are not informed by risk.
- Reacting to risks AFTER they occur can be costly and crippling, yet it is one of the most common tactics used by IT departments.
Our Advice
Critical Insight
- IT risk is business risk. Every IT risk has business implications. Create an IT risk management program that shares accountability with the business.
Impact and Result
- Transform your ad hoc IT risk management processes into a formalized, ongoing program, and increase risk management success.
- Take a proactive stance against IT threats and vulnerabilities by identifying and assessing IT’s greatest risks before they occur.
- Involve key stakeholders including the business senior management team to gain buy-in and to focus on IT risks most critical to the organization.
Member Testimonials
After each Info-Tech experience, we ask our members to quantify the real-time savings, monetary impact, and project improvements our research helped them achieve. See our top member experiences for this blueprint and what our clients have to say.
8.6/10
Overall Impact
$35,619
Average $ Saved
10
Average Days Saved
Client
Experience
Impact
$ Saved
Days Saved
Allegheny College
Guided Implementation
10/10
$6,499
3
City Of Charlotte
Guided Implementation
10/10
$32,499
5
Valence continues to keep us pointed in the right direction on this launch of an IT Controls Program. I appreciate that he not only takes the time ... Read More
South Australian Water Corporation
Guided Implementation
1/10
N/A
N/A
The analyst had not reviewed our current risk management framework and plan prior to the call - the meeting was not valuable.
Boston Dynamics
Guided Implementation
10/10
$64,999
5
Greg is very flexible, extremely experienced and we aligned easily on my desire to "right size" our risk management effort.
MDU Services LTD
Guided Implementation
10/10
N/A
29
Best: Having a framework, supporting tools & templates and a dedicated named expert in the subject (Donna Bales) to hand hold us through the progr... Read More
Johnson County Library
Guided Implementation
9/10
$2,599
5
MassMutual
Guided Implementation
10/10
$71,499
16
Fernco Inc
Workshop
9/10
N/A
10
Best parts since this was an update from previous years, Sumit provided pre-work prior to the workshop so that more discussion time could be spent ... Read More
Massey University
Workshop
3/10
N/A
N/A
Overall, I felt we gained very little from this exercise. It could be that we were starting from quite an advanced level of risk management to begi... Read More
Desert Lime Ltd
Guided Implementation
9/10
$20,500
23
Friendliness and support provided by the team
The University of Alabama at Birmingham
Guided Implementation
10/10
$2,479
5
Worst - I waited too long before engaging with Info-tech for advice. Best - Having an Info-tech professional look at where I was going and what I ... Read More
The Government of the Northwest Territories
Workshop
10/10
$22,000
50
Best - guided process by knowledgeable SMEs, InfoTechs flexibility in course delivery to meet our needs /Covid requirements. Deliverables are pract... Read More
University of Exeter
Guided Implementation
9/10
N/A
N/A
City of Carlsbad
Workshop
10/10
N/A
20
Integris Credit Union
Guided Implementation
9/10
$10,000
10
Being able to discuss our specific situation with a trusted resource is valuable, in order to right-size the solution. (IT Risk Mgmt). The Excel-... Read More
Dropbox
Guided Implementation
8/10
N/A
5
Pegasus Business Intelligence, LP d/b/a Onyx CenterSource
Guided Implementation
10/10
N/A
N/A
UMG RECORDINGS, INC.
Guided Implementation
10/10
N/A
N/A
The analyst was very knowledgeable and presented insights that were very relevant to our organization and goals. It served as good validation for ... Read More
AARP Inc
Guided Implementation
10/10
N/A
N/A
Fernco Inc
Workshop
10/10
$30,999
20
RPC Inc.
Guided Implementation
10/10
$2,546
10
Immediate response, thorough and complete explanation of the tools and process has helped tremendously
CFA Institute
Guided Implementation
8/10
N/A
N/A
Central Bank of Trinidad & Tobago
Guided Implementation
9/10
N/A
N/A
Kentucky Housing Corporation
Guided Implementation
10/10
$1,782
5
Bernie Gillies was great. Very friendly and informative. I enjoyed our conversation very much and feel as though I am much more equipped to take on... Read More
Trinidad and Tobago Unit Trust Corporation
Guided Implementation
10/10
$3,820
20
Really appreciated the quick response for assistance and the guidance and knowledge that was shared during this first interaction.