An Integrated IT Risk Model

An Integrated IT Risk Model

The worldwide concern with corporate governance concerns itself, inter alia, with the risks that an organisation faces; for many, IT is significant among those risks. This paper examines the audit approach, and others, to dealing with risks in IT-based systems. This paper summarises the findings of research in IT-related areas of risk and then draws together a charter for IT governance that mee...

Toward an Integrated Theory of IT-related Risk Control

Systemic Risk in IT Portfolios - An Integrated Quantification Approach

Recent trends in digitalization combined with continuous innovation pressure lead to an increasing number of IT project, which nowadays are accomplished within huge IT project portfolios. Even though numerous IT project and portfolio evaluation and planning approaches have been developed and applied in companies all over the world, about 25% of IT projects still fail, which may result in a glob...

An ISO Compliant and Integrated Model for IT GRC (Governance, Risk Management and Compliance)

GRC (Governance, Risk and Compliance) is an umbrella acronym covering the three disciplines of governance, risk management and compliance. The main challenge behind this concept is the integration of these three areas, generally dealt with in silos. At the IT level (IT GRC), some research works have been proposed towards integration. However, the sources used for the construction of the resulti...

An Integrated Risk-Based Technique for Project Plan Selection

  Selecting an effective project plan is a significant area in the project management. The present paper introduces a technique to identify the project plan efficient frontier for assessing the alternative project plans and selecting the best plan. The efficient frontier includes two criteria: the project cost and the project time. Besides, the paper presents a scheme to incorporate Directed Ac...