In: Operations Management
How should a company decide which IT risks are worth taking? How do you decide how much to spend to mitigate the risks you’ve opted to take?
The company needs to have an understanding of what is required for it's operations in terms of technology and based on this they need to analyse what are the IT services required and what are the risks associated with them. When the requirement of the company and the use of these services is more than the possible effects of the risks , then the risks are worth taking. Hence a company must know what it requires to decide on which IT risks are worth taking. The amount we need to spend also must be decided on what are the benefits of spending on the risks and why it is so important to have the technology even with these risks. If it is really a useful one we can spend on it , else we can try for alternatives available.