IT OPERATIONAL RISK MANAGEMENT PRACTICES IN AUSTRIAN BANKS: PRELIMINARY RESULTS FROM EXPLORATORY CASE STUDIES

摘要

The aim of this research is to discover practical insights and suitable methods to effectively manage IT operational risk in Austrian banking companies. We applied an exploratory case study approach and data were conducted using semi-structured face-to-face interviews with senior risk managers. The findings further improve our understanding of how operational risk departments are structured, how employee awareness of IT operational risk loss events is fostered, and the use of operational risk measurement approaches. Moreover, we shed light on practical implementation issues of internal controls in the business and IT processes.