ABSTRACT
Th is chapter discusses the process of assessing and managing risk in information technology (IT) environment. Risk management should be part of an organization’s thinking, integrated into strategic planning, operational planning, project management, resource allocation, and daily operations. Risk management enables an organization to focus on those areas that can have the highest impact.
