Good Practice Guide for Managing IT Risk in Colombian Banking: Specification by Disciplines

摘要

In this paper, we describe the work, findings, study case and contributions made in the development of the specification of the "Guia de buenas practicas de gestion de riesgo de TI en el sector bancario colombiano" . We present how doing the specification of the most important step of the guide, makes it a strong tool for managing IT risk in die Colombian banking sector. This was achieved by reviewing some of the most relevant theories in IT risk management, developing new models that exploit their best attributes, and presenting them from a business point of view. Finally, we present the results obtained from validating the new constructed models in our study case: the cheque clearing process of "Banco de la Republica"2; a core service in the organization that depends ninety percent on IT.