Scenario-based IT risk assessment in local government

Abstract

Information Technology (IT) has become an integral part of conducting business within organizations including local government. Local government depends heavily on the use of IT to achieve its goals and objectives. The use of IT poses a number of risks within local government. Thus it is important for IT to be governed adequately. Core to the governance of IT is the process of risk management. To conduct effective risk management, an adequate risk assessment must be conducted within its given context. The Auditor General identified lack of adequate risk assessments within local government in South Africa. The objective of this paper is to propose an automated scenario-based IT risk assessment process model for local government to improve risk assessment. The research study followed a design-oriented IS research approach to devise and revise the process model.