Managing information risk: a guide for accounting officers, board members and senior information risk owners

Abstract

It is essential that Boards consider all of the key risks associated with managing their business. Risk management guidance is already extensive, as outlined in the HM Treasury Orange Book and through subsequent guidance on setting and managing risk, which this guide does not seek to duplicate. The aim of this guide is to highlight specific issues related to the management of ‘information risk’. Understanding the nature of the risks to your business from failure to manage or use information is critical.The risks of managing information may not be understood as well as other risks by Boards and Accounting Officers.Yet, in many cases, they pose just as large a risk to the organisation as many of the more traditional risks.