Governing Information Technology Risk

摘要: Regulatory changes have affected the composition, role, and responsibilities of Boards Directors worldwide. While stronger frameworks for directors9 fiduciary resulted, considerably less attention has been devoted to understanding nature of, concomitant duty-of-care towards, information systems technology assets in organization, or IT Governance. As a result, not demonstrated competence that good governance demands. Governance takes two forms: defensive form, Risk Governance, seeks safeguard organization from consequences IT-related disasters; strategic Value which creates lasting shareholder value. This article focuses on Based an academic trade literature review, interviews with Board members six international firms, it presents model, Chain, dashboard outlines critical areas risk key questions directors should ask properly their firms.