Information Technology

INFORMATION TECHNOLOGY RISK MANAGEMENT IN ENTERPRISE ENVIRONMENTS

---

Risk is a quantitative evaluation of the potential damage caused by an attack, a vulnerability, or an event impacting the set of company IT assets. A vulnerability (or weakness) is a lack of a safeguard, which may be exploited by a threat, causing harm to the information systems; specifically it can be a software flaw that permits an exogenous agent to use a computer system without authorization or use it with authorization in excess of that which the system owner specifically granted said agent. Risk-generating events and vulnerabilities are implicitly related in the context of this discussion in the sense that (we postulate that) a vulnerability is ultimately caused by some subtending event, malicious or nonmalicious. For example, in a so-called ‘‘non- malicious event,’’ a flaw may be introduced in some software release by its designers, and then the event of having the IT group load and distribute that software throughout the enterprise creates a predicament where risk ensues. A ‘‘malicious’’ event may be a direct attack on the organization firewall, router, website, or database platform.

---

Availability

No copy data

Detail Information

Series Title

-

Call Number

-

Publisher

: ., 2010

Collation

1-441

Language

English

ISBN/ISSN

978-0-471-76254-6

Classification

NONE

Content Type

-

Media Type

-

Carrier Type

-

Edition

-

Subject(s)

INFORMATION TECHNOLOGY RISK MANAGEMENT IN ENTERPRI

Specific Detail Info

-

Statement of Responsibility

-

Other version/related

File Attachment

Comments

---

You must be logged in to post a comment