Beating IT Risks

Ernie Jordan has worked as an academic and IT practitioner in four continents and is now Professor of Management at the Macquarie Graduate School of Management in Sydney, Australia. He teaches and leads a research team in IT management, focusing on IT strategy, governance and risk. Luke Silcock consults extensively on all aspects of IT management for PA Consulting Group and its numerous major international clients. Since graduating from the University of New South Wales in 1992 he has maintained a keen focus on the practical aspects of IT strategy and implementation in his work with IT managers and business leaders.

• About the authors. Foreword.Acknowledgements.1 Thriving on risk.The challenge.Complications and deficiencies.The cure for your IT risk headache.2 IT governance framework.Different approaches to governance.Building a framework for your organization.Design and implementation issues.Case study: Aventis.3 IT risk portfolio.Introducing the IT risk portfolio.Implementing an IT risk management capability.Health check.Case study: European fleet management services provider.4 Projects.The impact of project failure.Organizational, program and project views of risk.Understanding IT project risk factors.Alternative philosophies for delivery assurance.Identifying, reporting and managing project risks.Health check.Case study: Agility.5 IT services.IT service failures that impact your business.Planning and preparation.Implementing IT service continuity.Health check.Case study: Police service.6 Information assets.Accessing your information assets.The impacts of information asset exploitation.The impacts of degraded information assets.The dimensions of security.Implementing information asset management.Health check.Case study: Investment management.7 IT service providers and vendors.The dimensions of service provider failure.The dimensions of vendor failure.Managing service provider risk.Managing multiple IT service providers.New and emerging risks in IT service provision.Health check.Case study: Financial services.8 Applications.The impacts of IT application failure on your business.The evolution of IT application risk.IT application risk profiles.Software assets and liabilities.The lifecycle approach to managing risks.Health check.Case study: Leading water company.9 Infrastructure.How IT infrastructure failure impacts your business.IT infrastructure’s evolving risks.Moving towards ‘set and forget’.De-risking infrastructure transformation.Health check.Case study: GCHQ.10 Strategic and emergent.The impact of IT failing to support the execution of your business strategy.Driving shareholder value through IT-enabled business change.The influence of your IT capability on business capability.Health check.Case study: Egg.11 IT and other enterprise risks.Relating the IT risk portfolio to other types of enterprise risk.Supporting risk-based management with IT.The dependence of IT risk management on broader enterprise competencies.In conclusion.Appendix 1: Review checklists.References.Index.

“This is an essential guide for anyone at risk from information technology failure.” (ISSG Magazine, Summer 2005)