• Proper security of IT networks within and outside the company.
• Service outage because of the power failure or natural disaster.
• Inadequate disaster recovery or business continuity measures.
• IT-related surprises coming from lax or ineffective project management. The larger IT projects - the higher the risk.
• Problems with IT-related activities outsourced to 3rd party vendors.
• Legacy systems can present surprises of incompatibility with newer systems or the way of the processing the information.
• Legal problems can arise around the intellectual property issues related to IT.
• Missing the fresh threads and opportunity of using leading-edge technology applications that competitors switch to.
• Risk that IT investments don't create a business value for the organization.
• Aligning of IT assets with the concurrent needs of multiple regulations. Example: data retention, information protection.
• Insufficient number of IT staff.
• IT staff with inadequate skills.
• Lack of agility/development problems.
• Problems with document content and knowledge management.
• Electronic archiving or storage problems.
• Privacy incidents.
• IT infrastructure is inadequate to meet the current and future needs of business in a cost-effective and timely manner.
The Global business faces probably the majority of all possible IT risks. Establishing the adequate IT governance can help to mitigate or eliminate most of risks.
Resource:
Applegate, L.M., Austin, R.D., Soule, D.L. (2009). Corporate information strategy and management: McGraw-Hill.