Risk Management in IT Governance Framework

Abstract

The concept of governance has an already old contour: the system by which business corporations are directed and controlled. The most praised principles regarding shareholder rights, transparency and board accountability now constitute the foundation for new tendencies evolved from such ground. Executive compensation, transparency and shareholder reporting are new issues attached to board responsibilities. Besides such almost negative approaches the board faces a more and more prominent role from risk management and IT governance perspective. Nowadays is generally acknowledged that the board is in charge for managing and controlling the risks to assets of the enterprises and business future. IT Governance has emerged as a support for corporate governance, as an important part of board’s striving efforts to perform better in a competition environment. These responsibilities, risk management and IT Governance, remain within the framework of old concept of corporate governance and are fed from its substance. The interaction between these concepts is the core interest of this research.IT Governance is defined as procedures and policies established in order to assure that the IT system of an organization sustains its goals and strategies. The management of the organisations face a new challenge: structural redefinition of the IT component in order to create plus value and to minimize IT risks through an efficient management of all IT resources of the organisation. The evolution of the present IT environment is a natural process according to which business environment should adapt.Corporate Governance, IT Governance, IT risk, Risk Management.