Why Risk Assessments Fail. Issue 4 (3rd October 2017)

• Record Type: Journal Article
• Authors: Engel, Barak
• Is Part Of: EDPACS. Volume 56:Issue 4(2017)
• Page Start: 1
• Page End: 6
• Publication Date: 2017-10-03
• Subjects: Electronic data processing -- Auditing -- Periodicals; Computers -- Access control -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.8
• DOI: 10.1080/07366981.2017.1362227
• Languages: English
• ISSNs: 0736-6981

Abstract

Abstract: In this article, we will examine in a light-hearted tone the chief reason why, in many organizations, risk assessments tend to be ineffective at driving actual, meaningful change, beyond fulfilling compliance requirements. While acknowledging the importance of identifying technical and operational risk areas, we focus on the lack of an appropriate, contextual business driver oriented discussion in a typical assessment, and how critical that missing communication can be to influencing important decision makers.