Formal process©

• Performed and managed

• Repeatable

• Spans enterprise

• Not completely ingrained in culture

• RISK-DRIVEN

• Common attributes:

  • Focus on critical assets

  • Responsibility of key organizational managers and IT

  • Funded as an expense

  • Implicit alignment to strategic drivers

  • Dependent on localized risk management

  • Informal governance, possibly CRM