Welcome » IT Booklets » Operations » Risk Identification
Management should have a thorough understanding of the institution's IT operations environment and should maintain appropriate supporting documentation. Documentation should be commensurate with the complexity of technology operations. Environmental surveys and asset inventories allow management to document data flow maps, system interfaces and dependencies, business technology processes, and hardware and software inventories. Management's ongoing environmental survey of technology operations is fundamental to enterprise risk identification, assessment, management, and monitoring.
Key elements include developing and maintaining: