Drivers for Risk Management

Commercial Entities

State/Local Government

Regulatory Mandates

(Sarbanes Oxley, HIPAA, California SB 1386, etc.)

• No SOX, but HIPAA and other activities may be applicable depending on the nature of business state/local agency is engaging in.

Collaboration with business partners

(integrated supply chains and delivery methods bring new business opportunity in a "federated" world; however, new risks are also being introduced)

• Inter/intra-agency collaboration will also pose challenges for those responsible for ensuring data and transactional integrity. The concept of "data owner" will certainly be an interesting discussion going forward…

Cost Savings

Effective risk management can reduce the overall number of service outages and minimize the impact of those outages that are unavoidable.

• Any organization or institution which employs Information Technology can save money through an effective Risk Management program. The problem is determining how much of the organization's resources should be deployed to mitigate identified threats.