Assessing and Managing IT Operational and Service Delivery Risk

摘要

IT projects introduce different operational and service delivery risk to live services. It is essential that such risk should be assessed and managed before the project goes live. This can be achieved only if there is a robust and sound IT operational and service delivery risk assessment process designed and implemented by the organisation. While the operational risk areas to be assessed by the process depend upon the IT risk and control framework of the organisation, there are certain essential ingredients to the process. A robust self-assessment process embedded within an SDLC process that includes effective adherence monitoring, supported by an enterprise-wide tool set, has proven successful in meeting the end objectives.