Systematizing IT Risks

• 作者: Georg Disterer
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: IT RISK IT SECURITY RISK IT RISK MANAGEMENT COBIT ISO 27000
• 年，卷（期）: 2019,（4）
• 页码范围: 237-249
• 页数: 13页
• 分类号: TP3

摘要

IT risks—risks associated with the operation or use of information technology—have taken on great importance in business, and IT risk management is accordingly important in the science and practice of information management. Therefore, it is necessary to systematize IT risks in order to plan, manage and control for different risk-specific measures. In order to choose and implement suitable measures for managing IT risks, effect-based and cause-based procedures are necessary. These procedures are explained in detail for IT security risks because of their special importance.