ISACA’s Risk IT Helps Organizations Balance Risk, Profit

Free download provides method for focusing on IT-related business risks such as late project delivery and compliance

Note: ESJ’s editors carefully choose vendor-issued press releases about new or upgraded products and services. We have edited and/or condensed this release to highlight key features but make no claims as to the accuracy of the vendor's statements.

ISACA, a nonprofit association of 86,000 information technology (IT) professionals, has released Risk IT: Based on COBIT, the first global IT-related risk framework to provide a comprehensive view of the business risks associated with IT initiatives, Risk IT builds on ISACA’s COBIT framework for IT governance to provide a missing link between conventional enterprise risk management and IT risk management and control.

Available as a free download at, Risk IT is designed to help enterprises increase their return on opportunities by managing risks more effectively rather than trying to eliminate them completely.

The framework and its supporting documentation are the result of thousands of hours of work from a team of IT and business experts and 60 expert reviewers spanning North America, Europe, the Middle East, Africa, and the Asia Pacific region.

“Risk IT saves time, cost, and effort by providing a clear method to focus on IT-related business risks such as late project delivery, compliance, misalignment, obsolete IT architecture and IT service delivery problems,” said Urs Fischer, CISA, CPA (Swiss), CIA, a developer of Risk IT. “Risk IT provides the guidance to help executives and management ask the key questions, make better risk-adjusted decisions and guide their enterprises so that risk is managed more effectively.”

Risk IT provides a single, comprehensive view of IT-related business risks, which can cost companies millions annually in lost revenues and opportunities.

Risk IT complements and extends COBIT and Val IT, but also is highly effective as standalone guidance. A key aspect is that all enterprises using IT, whether one-person shops or multinational conglomerates, can benefit from Risk IT. It can also be customized for any type of enterprise in any geographic location.

More information is available at

Must Read Articles