Illustration of an IT Risk Assessment

Area : IT Planning and Strategy

Source : IT Plan

Risk : Failure to plan for effective use of the IT resources

Outcomes:
Use of IT not alligned with the business objectives
Missed IT opportunities resulting to loss of competitive advantage

Control:
IT Long term and short term plan

Control effectiveness:
Medium effective(ME)
- IT Plan not reassessed periodically and feedback from users not captured and reported to the Steering Committee

Risk Mitigation Strategies (Recommendation):-
Review the IT plan on periodical basis via gathering feedback from the various users and report the status to the IT Steering Committee.