6. IT Risk Flashcards
1
Q
Risk
A
Probability * Impact
2
Q
Two conceptualizations of risk
A
- Risk as probable negative impact
- Risk as both negative and positive impact
- Downside risk
- Upside risk
3
Q
IT Risk
A
Potential for an unplanned event involving IT to threaten an enterprise objective.
4
Q
4A Framework
A
- Accuracy
- Availability
- Agility
- Access
5
Q
3 core disciplines of IT Risk management
A
- Foundation: Remove the complexity of IT systems.
- Create risk governance processes
- Create a risk-aware culture
6
Q
Lowest priority
A
Low cost of protection, tolerable downside risk.
7
Q
Bear the risk
A
High cost of protection, tolerable downside risk.
8
Q
Capitalize costs of risk mitigation
A
High cost of protection, intolerable downside risk.
9
Q
Mitigate ASAP
A
Low cost of protection, intolerable downside risk.
10
Q
Crisis response strategies
A
- Defensive strategy
- Denial
- Excuse - Accommodative strategy
- Apology
- Remedial actions - Moderation strategy
- Ingratiation
- Justification - Image renewal strategy
- Correction commitment
- Stakeholder commitment
- Value commitment
11
Q
High reputable firm stocks
A
Not affected by crisis responses.
12
Q
Low reputable firm stock
A
Negatively influenced by:
- Defensive strategy
- Accommodative strategy
Positively influenced by:
- Moderation strategy
- Image renewal strategy
