Information Technology Risk Management in Enterprise Environments : A Review of Industry Practices and a Practical Guide to Risk Management Teams

* Security is currently identified as a critical area of Information Technology management by a majority of government, commercial, and industrial organizations.

* Offers an effective risk management program, which is the most critical function of an information security program.