|
Information risk or IT risk is the risk of loss or damage as a result of the processing, transfer and storage of information using automated information systems, as well as failures in the operation of these systems.
T risks are related to hardware (computers, servers, sensors, etc.), software, data channels, as well as personnel who work directly with information technology in the enterprise.
IT risks are associated with the creation, transfer, storage and use of information through electronic media and other means of communication.
The main determining source of information risks is the information asset, which includes any information of value to the company.
It includes information printed or recorded on paper, mailed or shown in video recordings, transmitted orally, information stored electronically on database servers, websites, mobile devices, electronic media, information processed in corporate information systems (CIS) and transmitted through data transmission channels, as well as software: operating systems, applications, software documentation, etc.
The work to minimize IT risks is to prevent unauthorized access to assets, accidents and equipment failures, and ensure the availability of services and applications necessary for the operation.
The process of minimizing IT risks should be considered in a comprehensive manner: first, possible problems are identified, and then it is determined how they can be solved or prevented.
The purpose of information risk management is to minimize the amount of expenses of the enterprise to counteract information risks and total damage from these risks.
Negative impact of information risks on the activity of the enterprise, which is expressed in the downtime of the equipment of information systems in various departments, caused by the occurrence of information risks.
The impact of information risks on the economic activities of the enterprise can be expressed both in specific figures (for example, equipment downtime) and in indirect harm (loss of confidential information), which, as a result, can lead to a decrease in the economic efficiency of the enterprise.
|