New IT risk framework

The nonprofit, independent Information Technology Governance Institute (ITGI) recently issued an exposure draft of its new Risk IT Framework. The new framework is reported to be the missing link between enterprise resource management and IT risk management and control. But the greatest challenge posed by the new framework may be to identify all that can go wrong. The authors give us a useful overview of the new guidelines. © 2009 Wiley Periodicals, Inc.