Technology and risk management
A risk management program’s goal is to identify preventive and control measures to mitigate risks associated with specific activities and valuable assets. Many risk management efforts are narrowly focused, functionally driven, and disjointed. Therefore, each risk activity uses its own language, metric, and customs, leading to a fragmented view of risks. There is an inability to anticipate, control, or manage interdependent risks when there are no connections between risks and no holistic view of risk. Aiming to address the interoperability and standardization challenges in risk management, this book proposes a coordinated approach involving risk management, governance, and EA. It helps map and trace identified risks back to enterprise artifacts modeled within the EA, supporting an organization’s strategic priorities. While we are at it, let us shed some light on two levels of risks that need to be addressed, as follows:
- Initial level...
