The Risk IT Framework is designed to assist in developing, implementing or enhancing the practice of risk management by:
- Connecting the business context with the specific I&T assets
- Shifting the focus to activities over which the enterprise has significant control, such as actively directing and managing risk, while minimizing the focus on the conditions over which an enterprise has little control (threat actors)
- Increasing the focus on using a common risk language that correctly labels the items that have to be managed well to create value
Risk IT Framework Value
- The framework will enable enterprises to understand and manage all significant IT risk types, building upon the existing risk related components within the current ISACA frameworks.