IT Risk Management has become an important aspect of corporate governance in recent years. As a result, IT & Security groups in organizations are often subject to global and local regulations.

MetricStream in association with CSC is surveying industry professionals in various IT Risk & Security functions to better understand how their respective organizations are managing IT Risk.

This survey will take less than 10 minutes to complete. Thank you for taking the time to participate in this survey, and contributing your thoughts to this important topic.

Question Title

* 1. Please provide your email address (official email IDs only) below if you wish to receive the final report of the survey results, as well as be entered into a contest where 3 lucky respondents will receive either an Amazon or Starbucks gift worth $50 USD.

Please provide your email address (optional):

Question Title

* 2. Which of the functional areas cited below are in the purview of your organization’s IT risk management program?

Question Title

* 3. How many formal risk assessments are conducted at your organization over a one year period?

Question Title

* 4. How big is your IT risk team?

Question Title

* 5. Is your IT Risk Management Program integrated with your Enterprise/Operational Risk Management Program?

Question Title

* 6. Please rank the primary drivers in terms of the importance for your IT Risk Management program (Rate on a scale of 1 – 5, with 1 being least important and 5 being most important)

  1 2 3 4 5
Compliance with Legal and Regulatory Requirements
Enterprise Risk Management
Board Mandate
Information Security Risk Management
Audit Requirements

Question Title

* 7. Which international standards and frameworks have you adopted in your organization’s Risk Management Program? (Please select all that apply)

Question Title

* 8. Which of these would your risk management program perceive to be the biggest risk right now for your enterprise? – (Rate on a scale 1-5, with 1 being least important and 5 being most important)

  1 2 3 4 5
Data Loss / Breaches
Cloud
BYOD / Mobile
Social Media
Big Data
Vendors / Third Parties
Other (please specify)

Question Title

* 9. What is your current approach to Risk Management?

Question Title

* 10. How well are your objectives covered by the Technology supporting your Risk Management Program?

Question Title

* 11. What specific content and integrations do you currently leverage or subscribe to support your Risk Management Program?

Question Title

* 12. Do you plan to adopt or upgrade your IT Risk Management technology within the next 12 months?

Question Title

* 13. Where does the IT Risk function currently reside within your organization? Check all that apply.

Question Title

* 14. . Are there plans to change the functional group where the IT Risk function resides within your organization over the next 12 months?

Question Title

* 15. How involved is your senior management, board or board committee in establishing or policies on IT risk oversight and management?

T