Security Response

Organizations are experiencing rising incident rates across the areas of security, availability, performance, and compliance, with significant impact to revenue, reputation, productivity, and cost. According to the Computer Security Institute and the FBI, per-incident costs of unauthorized access to information averaged over $85,000 in 2006, and system downtime costs reached tens of thousands of dollars per hour. It doesn’t take long for one to recognize even good IT Risk Management practices may soon reach their limits.

So how can organizations advance from good to great IT Risk Management practice? The challenge lies in understanding their portfolio of IT risks, quantifying and prioritizing them against the organization’s risk profile, and developing an effective program of remediation activities.

The following five-step process can help organizations assess their levels of IT Risk, develop remediation roadmaps, and ultimately build effective, continuous IT Risk...