Research On Information Technology Risk Management

Information technology improves the efficiency of traditional industry and there are some new industries together with information technology. The use of information technology in e-pay, e-bank has enriched people’s financial life. Internet+ will give the traditional industry new vitality. However human is not able to be replaced by information technology completely. Information technology and staff are composing the new organization form and will exist for a long time. The information technology risk is complex and difficult to control. The information technology risk is increased along with the process and the loss is increasing.The thesis studies quality and defect of information technology first. And then, the thesis studies the case ‘8.16’ of Everbright. The development of information technology takes more on availability, performance, but the compliance is lack of attention and lack of the related professional business staff as well. Secondly, compliance risk is the common issue at present after study more public events and risk management software. Compliance risk is the shortage of the information technology. Finally, organization management shall be the supplement to information technology in risk management. Using both methods can improve the risk management.The thesis solves the information technology risk management problem from organization in two ways. First, the thesis raised the different strategy by the different loss values and loss frequency. Second, the thesis develop different information technology management model for the different stage of the company development. And there are four base rules for the information risk management. It was an innovative method to study the information technology risk from risk loss and organization management.