78
Operational IT risks
What does the term 'operational IT risks' mean? Operational IT risks are
business risks arising from a malfunction –loss of service availability,
confidentiality and integrity – of IT systems, IT infrastructures or underlying
facilities.
Figure 4: Operation of information technology in a company
Both business‐critical and non‐critical IT services support the company's
business operations. If these business processes, e.g. sales, HR, finance and
accounting, are no longer supported with the reliable IT that they require,
business will be negatively affected.
Cloud risks
Cloud risks that can damage business processes on account of the potential
unreliability of an IT service originating from the Cloud. So it is important to
understand its effect on the company. Every malfunction that occurs in the
Cloud, during transport or during provisioning to the business process adds
to the risk factor.
Figure 4 illustrates a service provisioned from the Cloud in its total transport
chain back to the user. This shows that the Cloud provider, the internet
provider responsible for transport to the company, and the company's own
IT infrastructure are responsible for reliability. In order to best manage the
risks of using Cloud services, they should be taken into account when
planning the necessary measures.
