Practical risk management for the CIO

The growing complexity of today's interconnected systems has not only increased the need for improved information security, but also helped to move information from the IT backroom to the executive boardroom as a strategic asset. And, just like the tip of an iceberg is all you see until you run into it, the risks to your information are mostly invisible until disaster strikes. Detailing procedures to help your team perform better risk assessments and aggregate results into more meaningful metrics, Practical Risk Management for the CIO approaches information risk.

Introduction: Why Risk Management? Liability; Personal Data Disclosed or Stolen; Intellectual Property Lost or Stolen; Wrong Decisions Made; Liability Risks Service Delivery; Transaction Centric; Information Centric; Risks to Service Delivery; Risks to the CIO PRINCIPLES AND CONCEPTS Overview; Market Risks; Budget Risks; People Risks; Technology Risks; Operational Risks; Information Risks; Control Risks; Detection Risks; Risk Treatment Basic Concepts, Principles,

And Practices ; Concepts; Risk IT Framework Principles; ISO 31000 Risk Management Principles; Other Risk Management Principles; Summary: Risk Management and Risk IT Principles; Information Security Principles; Accountability Principle; Awareness Principle; Ethics Principle; Multidisciplinary Principle; Proportionality Principle; Integration Principle; Timeliness Principle; Assessment Principle; Equity Principle; Information Management Principles; Value; Life Cycle; Reuse; Proliferates Quickly; Dependencies; Principles Risk Assessment, Analysis,

And Procedures; Making Decisions: Fact or Fiction? How Do You Decide?; Confidence Ranking Process; Facts; Calculations; Estimations; Guesses; Risk Management Starts with the Indi…