This toolkit, free to ISACA members, includes 10 sample risk scenarios that practitioners can use and tailor to their specific context within their enterprises. Risk scenarios facilitate communication in risk management by constructing a narrative that can inspire people to take action. The use of risk scenarios can enhance the risk management effort by helping the risk team to understand and explain risk to the business process owners and other stakeholders. Scenarios included in the toolkit include:
- IT Services Change Management
- Inability to Recruit or Retain IT Staff
- Inadequate Patch/Vulnerability Management
- Security Configuration Intentionally Modified
- Vendor Support Ends
- Phishing attack
- Third-Party Suppliers
- Failure to Implement Regulatory Changes
- Failure to Appreciate Value of Emerging technologies
- Unauthorize access of information
Format: ZIP
After completing check-out, your download will be available for 12 months under MyISACA > Resources.