IT Risk Management - Planning Cost-effective Mitigation of Risks to IT Services - Management Summary

Organisations vary in the immediacy of their vulnerability to IT failures. Some start losing money the moment that a critical system becomes unavailable while others may be able to carry on with a near-normal operation for a considerable time. However, ultimately any substantial business is dependent on IT services. This means that any business should be able to determine the costs (both direct and indirect) of the different types of IT failure, and to plan an appropriate, cost-effective response to IT risks.