Solved

Network / IT environment RISK (non security risks)

Posted on 2011-02-18
4
639 Views
Last Modified: 2012-05-11
When you ask most forums or IT folk about “risk” within IT environments, most of them immediately think you are on about “security”, “penetration testing” etc. I am  not convinced security is the only risk factor in an IT environment. But I genuinely am interested in getting some feedback from other people on what other elements of an IT environment outside IT constiture risk areas

So.... outside of security, what other risks are inherent within IT environments. Does there exist a master document with risk areas for a typical IT environment anywhere? Or can you provide some examples for me to review further?
0
Comment
Question by:pma111
  • 2
4 Comments
 
LVL 3

Author Comment

by:pma111
ID: 34925072
often known as a risk universe or audit universe
0
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 250 total points
ID: 34925124
OK,

there is the "Risk Management Guide for Information Technology Systems" by NIST.
http://www.hhs.gov/ocr/privacy/hipaa/administrative/securityrule/nist800-30.pdf

It introduces kind of a classification:

- Natural Threats - Floods, earthquakes, tornadoes, landslides, avalanches, electrical storms, and other such events.

- Human Threats (general) - Events that are either enabled by or caused by human beings, such as unintentional acts or deliberate actions (sabotage).
 
- Human Threats (IT related) - inadvertent data entry/data destruction, deliberate network based attacks, malicious software upload, unauthorized access to confidential information.

- Environmental Threats - Long-term power failure, pollution, chemicals, liquid leakage.


wmp
0
 
LVL 3

Author Comment

by:pma111
ID: 34925164
Thanks, I will read through I was more after if anyone had conducted a recent risk analysis / risk universe that they would share as a template...
0
 
LVL 13

Assisted Solution

by:notacomputergeek
notacomputergeek earned 250 total points
ID: 34927435
The State of California has developed this information:
http://www.cio.ca.gov/OIS/Government/risk/toolkit.asp

Of particular interest to you may be the 'Assessment Tool For State Agencies'. Fill this out to see where your organization ranks. Main categories are:
Organizational Reliance on IT
Risk Management
People
Processes
Technology

woolmilkporc already mentioned NIST SP 800-30 and listed the main topics of Business Continutity hazards.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Switch Uplinking Arista to Force 10 5 35
Setting up a VPN 60 136
ISP Change 14 45
Undo Sprint PCS iPhone 7 Plus iOS upgrade 4 11
Finding a job can be stressful - searches, resume tweaks, and networking events can be super boring. Luckily we're here to help you land your dream job!
Why pager replacement is still an issue OnPage has what some might call a “hate/hate” relationship with pagers. Not much room for love. As we see it, pagers are an antiquated bit of technology. Pagers are dinosaurs which, like most dinosaurs, sho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now