RITM 23: A system to an IT risk management implementation

Nowadays IT risk management is gettingmore and more importance in every organization, without it the last can't growenough and achieve predefined goals. In this paper, we will present a system,RITM 23, which will help organizations to easily implement IT risk management. Thus, many standards exist that deal with risk management but few focused on ITrisk management. Also, existing standards are complicated to be implemented. The proposed system, RITM 23, is a system based on a simplified roadmap for ITrisk management implementation. This simplified roadmap was designed usingcombined standards COBIT 5, COSO ERM and ISO 31000 in order to facilitate ITrisk management implementation.