Organization and Information Technology Risk Assessment

Abstract

          Information technology risk assessment is a process to protect confidential information that is important and prevent damage that may occur from information technology threats that can invade the organization's information. The risk assessment in this regard is another way to help support the success of the organization's mission. The information technology risk assessment focuses on protecting information in 3 areas, including confidentiality, accuracy, and availability. To achieve the protection of the said information the organization must assess the risk of access to information, accuracy and completeness of information, availability of information and management of information technology. Including other risk assessments related and affecting the assessment of information technology risks, both directly and indirectly by using the risk management process in all 6 steps.

          Therefore, if the organization conducts a risk assessment and manages information technology risks together with other risk assessments will help the organization's assets escape the general risks and risks associated with information technology. To complete the risk assessment of information technology in accordance with the set goals. Corporate executives must give priority and assign information technology experts to operate and support necessary, appropriate and standardized resources. Including the need to communicate within the organization to raise awareness about information security and use of information to personnel at all levels within the organization.