thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Risk IT Framework

ISACA framework addressing IT-related business risk, organized into risk governance, risk evaluation, and risk response domains.

Definition

Risk IT complements COBIT by providing an end-to-end view of IT risk management, including risk scenarios, risk appetite, and KRIs. Its three domains are Risk Governance (RG), Risk Evaluation (RE), and Risk Response (RR). Much of its content is reflected in COBIT 2019 and CRISC material.

Example

A firm uses Risk IT scenario guidance to build top-down and bottom-up risk scenarios.

Exam tip

Risk IT domains: Governance, Evaluation, Response.

Related terms