Information technology risk management

The concept of information technology (IT) risk is examined, and it is argued that the generally held conception is too narrow. The sources of IT risk and several problems that arise in managing that risk are explored. Some areas where research is needed are identified, and steps that can improve an organization's understanding of and ability to manage the IT risk it faces are proposed.<>