Risk Management: Information Technology and Public Value Delivery

The regulations, guidelines and procedures defined to support organizations with regard to information and communication technology (ICT) play a crucial role when any organization wants to carry out good corporate governance. In an attempt to ensure adequate control and management of activities, processes and procedures, the public sector is currently subject to the implementation and adoption of multiple models and standards. Risks related to communication and ICT still occur in these bodies. Despite the development of ICT risk management methodologies that have been published in various frameworks and/or standards to help organizations deal with ICT risks, it has still been questioned whether their methodology has demonstrated success. However, there is no single model that provides a unified solution, allowing for an integrated and global improvement of the processes used in this context. In addition to the need to support public institutions interested in introducing new processes, or improving existing ones in the area of ICT risk, with a view to better results in delivering public value.