SYS-CON MEDIA Authors: Maria C. Horton, Jason Bloomberg, Elizabeth White, Zakia Bouachraoui, Andy Thurai

News Feed Item

60% of Australian Organisations Are Not Effectively Managing IT Risks: ISACA Australia White Paper

A recent white paper issued by the Australian chapters of global IT association ISACA highlights the potential for security breaches and major technology disasters at leading Australian organisations, with 60% of IT professionals stating they do not believe all IT-related risks are being effectively managed. Furthermore, 64% of IT professionals believe the risk culture at their organisation is only moderately effective or not effective at all.

The white paper, titled IT Risk Management: Drivers, Challenges and Enablers for Australian Organisations, outlines results from an ISACA Australia-led survey of 111 Australian business and IT professionals and subsequent structured interviews conducted at the end of 2012. The study was designed to better understand the IT risk management drivers and challenges faced by Australian organisations.

“We are deeply concerned by the lack of importance being placed on managing IT risks. From these results, it is clear that Australian organisations aren’t adequately prepared,” said Paras Shah, founder and principal consultant at Vital Interacts, and principal author of the white paper. Shah, who is also a member of ISACA’s Framework Committee, will present findings from the white paper at the upcoming Oceania CACS2013 conference, It’s a Jungle Out There… Navigating Security, Audit and Governance, this September.

Key findings from the IT Risk Management white paper show:

  • 71% of respondents think Australian business teams lack awareness that IT risk management is important to attain business process goals and targets.
  • 89% believe that IT risk management activities are generally perceived by business stakeholders as a compliance burden, whether external or internal.
  • 23% identified a “major IT-related failure event” as one of the main drivers for their organisation to manage IT risks.
  • 26% indicated their IT risk management programs focused too much on IT security risks, rather than considering all IT-related risks.

Details of ISACA frameworks, including COBIT 5 (which incorporates ISACA’s previous Risk IT and Val IT frameworks), and the need for such process models, were also examined in the white paper, in relation to the findings. COBIT helps organisations govern and manage their information and technology to drive enterprise value.

The majority of survey participants came from the sectors of banking and finance services (35%), energy and utilities (11%), government and defence (11%) and manufacturing and industrials (8%) in organisations located across Australia, and included senior IT and risk management professionals.

This white paper was co-written by David Roche, ISACA Sydney Chapter president, and Anthony Rodrigues, ISACA Melbourne Chapter director.

Commenting on the findings, Rodrigues said, “Organisations must relate IT risks to business goals and keep the business engaged to create support and executive involvement. The importance of managing risk cannot be under-estimated and organisations must take responsibility for managing their risks.”

Roche added, “Organisations with a weak risk culture are exposed to inappropriate decisions in strategy, programs and operations. On the other hand, organisations with a mature risk culture have the ability to protect and enable the achievement of their objectives. We urge Australian IT professionals to review and update their IT risk management frameworks to ensure they are sufficiently protected.”

ISACA, an association of 110,000 IT professionals, will hold its Oceania CACS2013 conference at the Adelaide Convention Centre from 23-27 September 2013 and feature respected industry experts from Australia, New Zealand and around the world. For information on Oceania CACS2013 or ISACA, visit or

IT Risk Management: Drivers, Challenges and Enablers for Australian Organisations can be downloaded freely at

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
In today's always-on world, customer expectations have changed. Competitive differentiation is delivered through rapid software innovations, the ability to respond to issues quickly and by releasing high-quality code with minimal interruptions. DevOps isn't some far off goal; it's methodologies and practices are a response to this demand. The demand to go faster. The demand for more uptime. The demand to innovate. In this keynote, we will cover the Nutanix Developer Stack. Built from the foundat...
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessio...
"NetApp's vision is how we help organizations manage data - delivering the right data in the right place, in the right time, to the people who need it, and doing it agnostic to what the platform is," explained Josh Atwell, Developer Advocate for NetApp, in this interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
Sold by Nutanix, Nutanix Mine with Veeam can be deployed in minutes and simplifies the full lifecycle of data backup operations, including on-going management, scaling and troubleshooting. The offering combines highly-efficient storage working in concert with Veeam Backup and Replication, helping customers achieve comprehensive data protection for all their workloads — virtual, physical and private cloud —to meet increasing business demands for uptime and productivity.
The Software Defined Data Center (SDDC), which enables organizations to seamlessly run in a hybrid cloud model (public + private cloud), is here to stay. IDC estimates that the software-defined networking market will be valued at $3.7 billion by 2016. Security is a key component and benefit of the SDDC, and offers an opportunity to build security 'from the ground up' and weave it into the environment from day one. In his session at 16th Cloud Expo, Reuven Harrison, CTO and Co-Founder of Tufin, ...
While the focus and objectives of IoT initiatives are many and diverse, they all share a few common attributes, and one of those is the network. Commonly, that network includes the Internet, over which there isn't any real control for performance and availability. Or is there? The current state of the art for Big Data analytics, as applied to network telemetry, offers new opportunities for improving and assuring operational integrity. In his session at @ThingsExpo, Jim Frey, Vice President of S...
"We were founded in 2003 and the way we were founded was about good backup and good disaster recovery for our clients, and for the last 20 years we've been pretty consistent with that," noted Marc Malafronte, Territory Manager at StorageCraft, in this interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
Historically, some banking activities such as trading have been relying heavily on analytics and cutting edge algorithmic tools. The coming of age of powerful data analytics solutions combined with the development of intelligent algorithms have created new opportunities for financial institutions. In his session at 20th Cloud Expo, Sebastien Meunier, Head of Digital for North America at Chappuis Halder & Co., discussed how these tools can be leveraged to develop a lasting competitive advantage ...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settl...
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm. In their Day 3 Keynote at 20th Cloud Expo, Chris Brown, a Solutions Marketing Manager at Nutanix, and Mark Lav...
@CloudEXPO and @ExpoDX, two of the most influential technology events in the world, have hosted hundreds of sponsors and exhibitors since our launch 10 years ago. @CloudEXPO and @ExpoDX New York and Silicon Valley provide a full year of face-to-face marketing opportunities for your company. Each sponsorship and exhibit package comes with pre and post-show marketing programs. By sponsoring and exhibiting in New York and Silicon Valley, you reach a full complement of decision makers and buyers in ...
According to the IDC InfoBrief, Sponsored by Nutanix, “Surviving and Thriving in a Multi-cloud World,” multicloud deployments are now the norm for enterprise organizations – less than 30% of customers report using single cloud environments. Most customers leverage different cloud platforms across multiple service providers. The interoperability of data and applications between these varied cloud environments is growing in importance and yet access to hybrid cloud capabilities where a single appl...
"At the keynote this morning we spoke about the value proposition of Nutanix, of having a DevOps culture and a mindset, and the business outcomes of achieving agility and scale, which everybody here is trying to accomplish," noted Mark Lavi, DevOps Solution Architect at Nutanix, in this interview at @DevOpsSummit at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"Cloud computing is certainly changing how people consume storage, how they use it, and what they use it for. It's also making people rethink how they architect their environment," stated Brad Winett, Senior Technologist for DDN Storage, in this interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
A look across the tech landscape at the disruptive technologies that are increasing in prominence and speculate as to which will be most impactful for communications – namely, AI and Cloud Computing. In his session at 20th Cloud Expo, Curtis Peterson, VP of Operations at RingCentral, highlighted the current challenges of these transformative technologies and shared strategies for preparing your organization for these changes. This “view from the top” outlined the latest trends and developments i...