Criminals, competitors, journalists, and foreign governments, all have an interest in attacking companies’ most valuable assets: confidential customer information, intellectual property and confidential discussions.

Employees volunteer information about their job and their company on social media. How can organisations keep up with the constantly shifting threats and still take advantage of the opportunities provided by web 2.0 (social networks, blogs, tweets) to reinforce their image and spread their message to a wide audience?

IRM and the Federation of European Risk Management Associations (FERMA) have joined forces to find out more about how these risks are perceived and managed, and we are asking IRM and FERMA members to help with a short survey.
The results will be part of a report that will be delivered to the workshop on risks of the virtual world at the 2011 FERMA Forum from 2-5 October.

Question Title

* 1. What are the three top risks to business in general? (Please choose up to three)

Question Title

* 2. Which three risks most concern your organisation? (Please choose up to three)

Question Title

* 3. Does your organisation make a distinction between IT risks that arise during normal operations and risks with malicious or dishonest intent (cyber risks)?

Question Title

* 4. Does your organisation map its IT and cyber risks?

Question Title

* 5. Does the same job function have overall responsibility for managing operational IT risks and cyber risks?

Question Title

* 6. Are any of the following roles involved in managing cyber risks in addition to IT security?

Question Title

* 7. Does your organisation have a policy for employees on use of social media?

Question Title

* 8. 8. Does your organisation have regular surveys of its reputation on web 2.0 tools (social networks, blogs, tweets, ...)

Question Title

* 9. What is your experience? Only the first three of these questions are essential but it’s helpful to know who has responded. None of the details will be published.

T