Aligning IT Teams' Risk Management to Business Requirements

View Sample PDF

Author(s): Corey Hirsch (LeCroy Corporation, USA)and Jean-Noel Ezingeard (Kingston University, UK)
Copyright: 2009
Pages: 15
Source title: Social and Human Elements of Information Security: Emerging Trends and Countermeasures
Source Author(s)/Editor(s): Manish Gupta (State University of New York, USA)and Raj Sharman (State University of New York, USA)
DOI: 10.4018/978-1-60566-036-3.ch017

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Aligning IT Teams' Risk Management to Business Requirements on the publisher's website for pricing and purchasing information.

Abstract

Achieving alignment of risk perception, assessment, and tolerance among and between management teams within an organisation is an important foundation upon which an effective enterprise information security management strategy can be built .We argue the importance of such alignment based on information security and risk assessment literature. Too often lack of alignment dampens clean execution of strategy, eroding support during development and implementation of information security programs . We argue that alignment can be achieved by developing an understanding of enterprise risk management plans and actions, risk perceptions and risk culture. This is done by examining context, context and process. We illustrate this through the case of LeCroy Corp., illustrating how LeCroy managers perceive risk in practice, and how LeCroy fosters alignment in risk perception and execution of risk management strategy as part of an overall information security program. We show that in some circumstances diversity of risk tolerance profiles aide a management teams’ function. In other circumstances, variances lead to dysfunction. We have uncovered and quantified nonlinearities and special cases in LeCroy executive management’s risk tolerance profiles.

The IRMA Community

Research IRM

Aligning IT Teams' Risk Management to Business Requirements

Purchase

Abstract

Related Content

IRMA Sponsors