Welcome » IT Booklets » Operations » Risk Identification
Management should have a thorough understanding of the
institution's IT operations environment and should maintain
appropriate supporting documentation. Documentation should be
commensurate with the complexity of technology operations.
Environmental surveys and asset inventories allow management to
document data flow maps, system interfaces and dependencies,
business technology processes, and hardware and software
inventories. Management's ongoing environmental survey of
technology operations is fundamental to enterprise risk
identification, assessment, management, and monitoring.
Key elements include developing and maintaining: