
Participants in the study gave a critical or serious rating of 78 percent to availability risk, while 70 percent said security risk, 68 percent performance risk, and 63 percent compliance risk.
Hughes added, “The data also support two important conclusions. First, a majority of participants rates every area of IT Risk either ‘Critical’ or ‘Serious’. Second, only 15 percentage points separate the top- and bottom-rated categories. IT Professionals are adopting a more balanced view of IT risks.”
Hughes said that the survey debunked four myths: that IT risk management is focused only on IT security; that IT risk management is project driven; that technology alone can manage IT risk; and that IT risk management has already become a formal discipline.