ビジネス目標を IT リスクにマッピングすることは、IT リスク管理戦略をビジネス戦略および目標に合わせるのに役立つため、現在の IT サービスのリスク自己評価で対処する最も重要な要素です。ビジネス目標を IT リスクにマッピングすると、ビジネス目標の達成に影響を与える可能性のある主要な IT リスクを特定して優先順位を付け、適切なリスク対応と制御を決定するのにも役立ちます。
また、ビジネス目標を IT リスクにマッピングすると、IT リスク管理の価値と利点をビジネス関係者に伝え、組織内でリスクを認識する文化を育むことにも役立ちます。この答えを裏付ける情報源の 1 つが、リスクと制御の自己評価に関する包括的なガイド RCSA です。このガイドには、「RCSA は、目標を達成するために、スタッフの作業とビジネスにリスク管理手法、ビジネス プロセス、および文化の使用を含めることを目指しています」と記載されています。

According to the CGEIT exam guide, the risk appetite is the amount and type of risk that an enterprise is willing to accept in pursuit of its objectives. It is a key element of the IT governance framework and should be defined by senior management before developing and managing digital applications for a new enterprise. The risk appetite provides the basis for establishing the risk management strategy, policies and processes, as well as the risk culture and awareness of the enterprise. Reference: CGEIT Exam Candidate Guide, page 15. CGEIT Certification

セクション: 巻 A

An IT summary dashboard is the best way for a CIO to provide progress updates on a newly implemented IT strategic plan to the board of directors, because it can help to communicate the key performance indicators (KPIs), benefits, risks, and issues of the IT strategic plan in a concise, visual, and interactive way. An IT summary dashboard can also help to align the IT strategic plan with the business strategy, value creation, and stakeholder expectations, and demonstrate the value and contribution of IT to the enterprise. Presenting IT critical success factors (CSFs), reporting results of key risk indicators (KRIs), and reporting results of stage-gate reviews are not as effective as presenting an IT summary dashboard, because they are more focused on specific aspects of the IT strategic plan, rather than providing a holistic and comprehensive overview. Reference:
IT Governance Dashboard, ISACA
What is an IT Dashboard?, Smartsheet
IT Strategy Dashboard, ClearPoint Strategy