Handbook

Information systems and information technology (IS/IT) underpin the operation of most facets of most organisations. IS/IT provide means by which organisations process their transactions, the mechanisms by which business stakeholders communicate, the information required to manage the performance of the business, and the capability for the business to pursue its strategic plans. The reliance on IS/IT by organizations involves a broad range of risks to all the IS/IT assets within and connected to the organizations. These risks relate all standard categories of IS/IT assets including software, hardware, networks, people.

These risks relate to the correct operation of the systems themselves, the integrity and security of the data, information and intellectual property they manage, the development and implementation of new systems and the improvement of existing systems. Poor management of these IS/IT risks can create business risks that have implications for the business’s ability to continue its day to day operations, meet its obligations, it reputation and its strategic plans. These IS/IT risks need to be identified and managed in a systematic way.

This course investigates these risks in a systematic manner and looks at the current theory, methods and best practice for their identification, assessment, analysis and mitigation.