Spelling suggestions: "subject:"IT risk managemement"" "subject:"IT risk managementment""
11 |
Challenges and Opportunities of Having an IT Disaster Recovery PlanGhannam, Mohamed Ziyad January 2017 (has links)
There are various types of disasters and no one can expect when they will occur. IT disaster recovery plan (ITDRP) became one of the most important contingency plans for organizations in the event of disasters. Organizations started realizing the importance of having IT Disaster recovery plan but many hesitate to apply this plan before a disaster occurs. However, even when the importance of ITDRP is acknowledged in the IS field, most scholarly work has focused on the process and strategies while briefly looking at the challenges and benefits of the DRP. This paper aims to investigate the most common challenges associated with having an effective ITDRP and the opportunities associated with this plan. A qualitative study was conducted which consists 6 interviews within several organizations which have developed an ITDRP. The results show that top management support, staff issues, maintenance, and disaster recovery sites are the main challenges organizations face during DRP. While the benefits were data protection, reducing the interruption for business functions, enhancing the reliability for staff and IT services and speeding up the decision-making process.
|
12 |
Modelo de gestión de riesgos de tecnología de información para garantizar la continuidad del servicio en los procesos organizacionales en los institutos de educación superior tecnológicos públicosMilian Saavedra, Jefferson James January 2024 (has links)
This research has public technological higher education institutes as a case study, which proposes an IT risk management model to guarantee the continuity of the service in its main processes, where 3 public institutes were analyzed to determine the current state of the
processes of those institutes, obtaining as results that the IT areas have not identified the risks to which the institutions are exposed and they do not have a strategic IT plan, which generates that within the institutes there is no improvement in their organizational processes.
The model is based on the harmonization of standards or frameworks that refer to risk management, which were analyzed in a general way to determine the impact on IT risk management to guarantee the service continuity in the organizational processes, of which only 3 were selected from a list of 6. The model was validated through expert judgment, which was based on the indicators of sufficiency, clarity, coherence and relevance to give the validity and acceptance of the proposed model.
Finally, the model was applied in an institute which allowed it to improve IT risk management and guarantee the continuity of the service of its organizational processes, through compliance with the CBC licensing requirements. / Esta investigación tiene como caso de estudio a los institutos de educación superior tecnológicos públicos, la cual propone un modelo de gestión de riesgos de TI para garantizar la continuidad del servicio en sus principales procesos, en donde se analizó a 3 institutos públicos para poder determinar el estado actual de los procesos de dichos institutos, obteniendo como resultados que las áreas de TI no tienen identificado los riesgos a los que están expuestas las instituciones y no cuentan con un plan estratégico de TI, lo que genera que dentro de los institutos no exista una mejora en sus procesos organizacionales.
El modelo se basa en la armonización de estándares o marcos de trabajo que tienen referencia a la gestión de riesgos, los cuales se analizaron de forma general para determinar la afectación en la gestión de riesgos de TI para garantizar la continuidad del servicio en los procesos organizacionales, de los cuales se seleccionaron solo 3 de una lista de 6. El modelo fue validado por juicio de expertos, los cuales se basaron en los indicadores de suficiencia, claridad, coherencia y relevancia para dar la valides y aceptación del modelo propuesto.
Finalmente, el modelo fue aplicado en un instituto el cual permitió mejorar la gestión de riesgos de TI y garantizar la continuidad del servicio de sus procesos organizacionales, a través del cumplimiento de los requisitos de la CBC de licenciamientos.
|
Page generated in 0.0892 seconds