Risk assessment and risk evaluation of CIO´s position

In the turmoil of globalization, nothing is stable except change. As far as enterprises are concerned, cost reduction is a must. The information technology (IT) function is the ideal candidate to experiment rightsizing and outsourcing policies that seem the best way to ensure competitiveness. The CIO (Chief Information Officer) is the natural candidate scapegoat. To avoid this fate, the today "new CIO leader" has to overcome the traditional role of technical expert and implement strategies for the survival of the IS unit. In this effort, the conceptual framework of IT security can be of help. The contingency planning and risk management techniques applied to the IS unit require ad hoc models to define the exact nature of threats, vulnerabilities, and countermeasures.