An empirical study on the risk framework based on the enterprise information system

摘要

Modern enterprises have ever-increasing dependence on the complex information system, and they are also faced with the enormous risks of the application information system. This paper briefly introduces the framework for enterprise risk management and external audit requirements under IT environment, and presents the idea for applying and controlling the information system that meets the requirements of the enterprise risk management, and the application in manufacturing enterprise. Finally it gives a detailed analysis of the conduction relation of project risks, service supplier and outsourcing risks, application risks and infrastructure risks, strategic risks of the information system, and interaction among various risks.