I am writing an IT Risk Management Framework, which will include key risk indictors for us to monitor the risk. Does anyone know of some references you could point me to that will give me some ideas for writing the framework and the KRIs?
Thank you,
-------------------------------------------
Stephen Habursky
Enterprise Risk Management Consultant
Erie Insurance Group
Erie PA
United States
stephen.habursky@erieinsurance.com -------------------------------------------