Rarely one can find a risk related discussion that is specific to IT risks and that reaches beyond IT Security. This is rather surprising given that most business processes today rely heavily on IT and that risk management is a hot topic in corporate governance as well as a major source of business for compliance consultants.

In this article we look at typical definitions of risk and then inspect what types of risks occur in the IT risk landscape. In the last section we look into the perception of risk, and consider where we can often find blind spots.