IT risk

the long version

"In this book, the authors define four types of IT risk: availability, access, accuracy, and agility. Citing numerous company examples, they then introduce three disciplines that enterprises must master to manage IT risk effectively: a solid foundation of IT assets, people, and supporting processes and controls that enable executives to manage the right risks in the right order; a well-designed risk governance process - including oversight by high-level executives - that allows companies to identify, prioritize, and track risks; and a risk-aware culture, nurtured from the top, that attunes people to the causes and solutions for IT risks and creates increased vigilance across the organization."--Jacket.