Gartner Says IT Needs To Better Manage Risk

Despite IT operations becoming more integral to a company's business success, larger enterprises have failed to adjust their processes for IT decision making and risk-management. This assertion was made yesterday at the Gartner Symposium/ITxpo 2007 conference in Orlando by Richard Hunter, group vice president and Gartner fellow in Gartner Executive Programs.

Hunter, who co-wrote the recently released book IT Risk: Turning Business Threats into Competitive Advantage, also said there has been an increased dependence on the "smooth functioning" of IT, which has served only to amplify the business impact of IT risk incidents.

"IT risk incidents harm constituencies within and outside companies," Hunter said. "They damage corporate reputations and expose weaknesses in companies' management teams. Most importantly, uncontrolled IT risk dampens an organization's ability to compete."

Hunter defined IT risk as a threat to any of four business objectives: the availability of IT systems and business processes; the right people in an organization having access to the data and systems; the reliability of IT systems to provide accurate and timely information; and the agility of IT systems to change if a company either acquires another organization or implements a significantly different business process redesign.

IT risk factors are something to be managed, not eliminated, Hunter said, adding that proper management means making trade-offs between risk and return, between the perils a company can bear and the risks it would rather avoid. Until now, however, business managers haven't had the tools or disciplines to manage IT risk.

He suggested there are three disciplines IT managers should learn to manage IT risk, including a foundation of IT assets, people and supporting processes, a well thought-out risk governance structure and process, and the establishment of a risk-aware culture that attunes users to the causes and possible solutions for IT risks.

Posted by Ed Scannell on 10/11/2007 at 1:23 PM


Featured

  • Exchange Server June Cumulative Updates Arrive, but with Red Tape

    Microsoft released its quarterly cumulative updates (CUs) for Exchange Server 2013, 2016 and 2019 products this week, but added an extra step for IT pros to consider before installing them.

  • Moving an Old VM to a New Hyper-V Host

    So you want to know whether a Hyper-V virtual machine built on a legacy host will be supported by a newer server? There's a PowerShell command for that.

  • AI-Driven Solution Tracks Packets Through the Datacenter

    Datacenter solutions vendor Kaloom this week unveiled a new offering the company says will enable the development of "self-driving" datacenter networks.

  • Microsoft Previews Azure Bastion Service for Private VM Access

    Microsoft on Tuesday announced a preview of the Azure Bastion service, which lets a user connect to an Azure virtual machine (VM) using a private Internet connection.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.