The technology risk landscape for mobile, IoT and cloud is changing — fast. Companies are adjusting to keep up with the speed and velocity of change, including the adoption of emerging technologies, such as RPA and blockchain. As a result, there is an increasingly direct connection between IT risk and enterprise risk—and, more broadly, enterprise strategy.
But according to KPMG’s recently-released 2017 inaugural technology risk management survey, technology risk management needs to evolve to be prepared for this new, fast-paced and disruptive world. Many organizations operating in the digital age do not consider technology risk as a value center and still remain stuck in traditional, compliance-focused approaches to technology risk that don’t offer the best control of technology assets, processes and people — including static qualitative measurement, reactive risk decisioning and a lack of innovation.
The survey found, for example, that 72% of organizations bring tech risk teams into projects after the fact, once issues have already arisen. In addition, 50% of organizations are using stale IT risk data collected through ad hoc means, rather than real-time data from…
