9
Risk management Risk management is the identification and assessment of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

ITFT Risk management

Embed Size (px)

Citation preview

Page 1: ITFT Risk management

Risk management

Risk management is the identification and assessment of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

Page 2: ITFT Risk management

Risk Management Risks can come from uncertainty in financial

markets, threats from project failures (at any phase in design, development, production, or sustainment life-cycles), credit risk, accidents, natural causes and disasters as well as deliberate attack from an events of uncertain or unpredictable root-cause.

Page 3: ITFT Risk management

Risk Management Process

Page 4: ITFT Risk management

Step-1Identify - Risk identification allows

individuals to identify risks so that the operations staff becomes aware of potential problems. Not only should risk identification be undertaken as early as possible, but it also should be repeated frequently.

Page 5: ITFT Risk management

Step-2

Analyze and prioritize - Risk analysis transforms the estimates or data about specific risks that developed during risk identification into a consistent form that can be used to make decisions around prioritization. Risk prioritization enables operations to commit resources to manage the most important risks.

Page 6: ITFT Risk management

Step-3Plan and schedule - Risk planning takes the

information obtained from risk analysis and uses it to formulate strategies, plans, change requests, and actions. Risk scheduling ensures that these plans are approved and then incorporated into the standard day-to-day processes and infrastructure

Page 7: ITFT Risk management

Step-4Track and report - Risk tracking monitors

the status of specific risks and the progress in their respective action plans. Risk tracking also includes monitoring the probability, impact, exposure, and other measures of risk for changes that could alter priority or risk plans and ultimately the availability of the service. Risk reporting ensures that the operations staff, service manager, and other stakeholders are aware of the status of top risks and the plans to manage them

Page 8: ITFT Risk management

Step-5Control - Risk control is the process of

executing risk action plans and their associated status reporting.

Page 9: ITFT Risk management

Step-6Learn - Risk learning formalizes the lessons

learned and uses tools to capture, categorize, and index that knowledge in a reus

able form that can be shared with others.